Exploit2Impact

Integrations and API

Integrate cyber risk quantification into your workflows.

Versioned REST APIs, OpenAPI contract, structured errors, idempotency, scoped API keys, signed webhooks and asynchronous jobs connect Exploit2Impact to portals, GRC tools, assessment pipelines and managed services.

Request information

By category

What connects to what.

Where an integration requires credentials or external setup, it is supported and configurable by the deployment.

Identity

Corporate sign-in and automatic user provisioning.

  • OIDC
  • OAuth2 introspection
  • SCIM 2.0

Threat intelligence

Scenario enrichment with public and reputation sources.

  • NVD
  • EPSS
  • CISA KEV
  • OSV
  • PhishTank
  • AbuseIPDB

Notifications

Alerts on critical events in the channels the team already uses.

  • Email
  • Telegram
  • Slack
  • Teams
  • Webhook

Data and automation

Formats and channels to connect the platform to other systems.

  • REST API
  • OpenAPI
  • CSV
  • JSON
  • SSE

Infrastructure

Components for controlled, scalable deployments.

  • PostgreSQL
  • Redis
  • RQ
  • S3-compatible

Optional AI

Additional narratives and recommendations, with a provider chosen by the deployment and human review.

  • LLM provider

API contract

Stable where it matters, versioned where it changes.

Versioning

The supported surface for new integrations is /api/v1. Breaking changes require a new major version and legacy routes remain temporarily available with deprecation headers.

Errors and compatibility

Error responses keep the legacy error field and add a structured envelope with code and message. Clients must tolerate additive fields.

Endpoint familyWhat it covers
SimulationSingle, batch, scenario comparison, sensitivity analysis, CSV and SSE streaming
AnalysisMonte Carlo, maturity, supply chain, prediction, recommendations and narrative reports
Remediation and complianceRemediation, ROI, compliance indicators and PDF
WorkspaceSimulation history, scenarios, assets and export
Identity and tenantsAuthentication, sessions, 2FA, OIDC, API keys, users, tenants, SCIM
OperationsJobs, artifacts, schedules, webhooks, notifications, audit, health and readiness

Let's build your integration together.

Tell us which systems you want to connect Exploit2Impact to: we will explain how to proceed.

Contact us