You can use our API to manage your targets, view your issues, kick off scans and retrieve your results - why not integrate Intruder into your development pipeline for maximum peace of mind?
Everything you need to know can be found on our API Reference Page.
š« Plan Availability: Intruder's API is available to users on our Cloud, Pro, Enterprise, and Vanguard plans.
ā¹ļø Note: The API is available to admin users only.
What is the Intruder API?
Our API is organized around REST. It has predictable resource-oriented URLs, accepts form-encoded request bodies, returns JSON-encoded responses, and uses standard HTTP response codes, authentication, and verbs.
The Intruder RESTful API Reference provides a detailed list of all API endpoints and their descriptions. All calls to the API are validated against an API token. A token carries the creating admin's full account-wide access and cannot be scoped to a tag or a subset of targets. Please review our Creating API access tokens article to learn how to create an access token for your account, as well as our Permission controls article for more information on roles and privileges.
Our API is rate-limited on a per-user basis. If the API receives too many requests for a single access token, the API will start rejecting requests. See more details about rate-limiting here.
Managing your Targets
With our variety of Target endpoints, you can:
list targets on your account
add targets (including adding in bulk)
You can also list the licences on your account and the targets associated with them with our Licences endpoint.
Viewing your Issues
With the Issue endpoints, you are able to:
list all issues on your account
list occurrences of a specific issue
list fixed occurrences of a specific issue
retrieve the Raw Scanner Output for a particular occurrence of an issue
ā
Kicking off Scans
With our Scans endpoints, you are able to:
list current scans on your account (as well as filter by status)
kick off a new scan on the specified target or tag