What this endpoint does

Retrieve all assets in a project affected by a specific exposure signature. This is the drill-down step after using the List Exposures endpoint to identify high-priority vulnerabilities — pass the signature ID (such as a CVE identifier like CVE-2024-38002 or a detection name like low-security-cipher-list) to see exactly which assets are impacted. Each affected asset includes extracted evidence specific to that finding, such as the detected cipher suites, protocol versions, or software banners, along with the host and port where the exposure was identified. The full signature metadata is also returned alongside the asset list for reference.

Response data

Returns a single object containing an asset_exposures array and the full signature metadata. Each asset exposure entry includes the asset ID (domain name or IP address), a details object with the target host:port string and extractions showing the specific evidence discovered, and an instances array for per-port details. The signature object provides the detection description, severity, remediation steps, references, and any linked CVE/CVSS/CWE/EPSS data. Pagination metadata includes cursor tokens and the total count of affected assets.