ASI Exposures: List

get

https://api.securitytrails.com/v2/projects/{project_id}/exposures

Retrieve a deduplicated, project-wide list of exposure signatures with affected-asset counts.

What this endpoint does

Returns a deduplicated, project-wide list of exposure signatures — each signature appears once with an aggregate count of affected assets. Use this as the starting point for a remediation workflow: filter by severity, CVE ID, CVSS score range, or CWE to identify high-priority exposures, then call ASI Exposures: Get Assets with the signature ID to see which specific assets are affected. Severity values: unknown, informational, moderate, critical. Prefer filter_severity_min (returns at or above threshold) or filter_severity_exact over the deprecated filter_severity parameter.

Response data

Returns exposure signatures with their affected asset counts and linked CVE/CWE/CVSS/EPSS data — enough to prioritize which exposure types to remediate first based on both severity and blast radius. Paginated via cursor; default 100 results per page, max 1,000.

Path Params

project_id

string

required

Query Params

cursor

string

Opaque string provided in next_cursor of previous results

limit

integer

1 to 1000

Defaults to 100

The number of exposures

filter_cve_id

string

Filter for asset or exposure tied to a vulnerability with the provided CVE. Example CVE-2024-6387.

filter_cvss_score_gte

number

0 to 10

Filter for asset or exposure tied to a vulnerability with the provided CVSS score range. Example 7.5. You will generally just use the 'low' end of the range.

filter_cvss_score_lte

number

0 to 10

Filter for asset or exposure tied to a vulnerability with the provided CVSS score range. Example 7.5. You will generally just use the 'low' end of the range.

filter_cwe_id

string

CWE-[0-9]+

Filter for asset or exposure tied to a vulnerability associated with the provided CWE (see: https://cwe.mitre.org/). Example CWE-79.

filter_severity

string

enum

deprecated

DEPRECATED: Use filter_severity_exact or filter_severity_min instead. Filter for assets which have an exposure severity matching or higher than the provided value. Acceptable values: unknown, informational, moderate, critical.

Allowed:

filter_severity_exact

string

enum

Filter for assets which have an exposure severity matching the provided value. Acceptable values: unknown, informational, moderate, critical.

Allowed:

filter_severity_min

string

enum

Filter for assets which have an exposure severity matching or higher than the provided value. Acceptable values: unknown, informational, moderate, critical.

Allowed:

Responses

What this endpoint does

Response data

200Successful Response

422Validation Error