API
The API integration allows external systems to retrieve findings, incidents, and other security events generated by the Inopli platform. This enables seamless integration with third-party systems such as SIEMs, dashboards, GRC platforms, or custom automation workflows.
Access to the API is read-only and secured through a private token provided by the platform. No configuration is required on the user’s side.
How It Works
Each company receives a private API token generated by the Inopli platform. This token is scoped to the organization and must be included in the Authorization
header of all API requests.
The API provides structured, RESTful endpoints for accessing:
Confirmed findings
Incident records
VIP exposure data
Asset and profile information
All requests return data in JSON format, and the platform logs all access attempts for security and auditing purposes.
Access Details
Token Delivery: The token is issued by the Diazero Technologies team and delivered securely to the company
Rate Limiting: Access is rate-limited per company
Expiration: Tokens do not expire by default but can be manually rotated by the platform administrator upon request
📌 Security Note: This token provides access to sensitive organizational data. It must be stored securely and treated as a credential.
Example Use Cases
Pull all true positive findings in the last 48 hours for correlation in a SIEM
Retrieve open incidents to auto-create tickets in an ITSM platform
Export VIP-related alerts into a GRC system for continuous risk monitoring
Last updated