What this endpoint does

Retrieve the complete exposure profile for a specific asset, providing significantly more detail than the exposure summary available through the Read Asset endpoint's exposures field. Each exposure includes the full detection signature with a detailed vulnerability description, severity classification, associated CVE and CWE identifiers, external reference links, and actionable remediation steps. Use this endpoint when building a remediation plan, generating a risk report for a single asset, or correlating detected vulnerabilities with known CVEs. The asset_id is the domain name or IP address as returned by the Find Assets or Search Assets endpoints.

Response data

Returns an array of exposure objects, each containing per-port instance details with extracted evidence (such as specific cipher suites, protocol versions, or software banners) and the target host:port string. The signature object on each exposure provides the detection identifier (usable with the List Exposures and Get Exposure Assets endpoints), human-readable name, full description, severity level (critical, moderate, or informational), remediation action steps, external references, and linked CVE/CWE entries. Metadata includes total and returned counts.

200Successful Response

422Validation Error