API Access
Pull findings into your SIEM, trigger scans from your CI/CD pipeline, or build a custom internal dashboard on top of the same data the console uses.
No security platform should be a data island, and Venstap is built so the console is simply the first client of its own API rather than a special privileged surface. The same REST endpoints that power asset management, scan orchestration, and findings triage in the dashboard are available to your own tooling: trigger a scan as a step in a CI/CD pipeline before a production deploy, pull findings into a SIEM for centralized correlation, or build a lightweight internal status page for stakeholders who need one specific view. Every API request is scoped by the same role hierarchy enforced in the UI, so an integration token can be limited to exactly the access it needs — read-only findings for a reporting integration, or scan-trigger permission for a deploy pipeline, without a blanket admin credential.
What you get
- REST endpoints for assets, scans, findings, and reports scoped by role
- WebSocket gateway for real-time event subscriptions
- Outbound webhooks for scan-completed and finding-status-change events
- Scoped API access so integrations only see what they need
Ready to see Venstap in action?
Get a guided walkthrough of scanning, triage, and reporting on your own assets.