See the full API Version 1.3.0 reference for request/response details.
Add target create endpoint
Added POST /targets to create a target in the organization. The request accepts name, category, description,
uri, ip_address, and a tags relationship, matching the fields supported by PATCH /targets/{id}.
Add target show endpoint
Added GET /targets/{id} to retrieve a single target. Archived targets and targets the
user cannot access return a 404.
Add target update endpoint
Added PATCH /targets/{id} to update a target’s name, category, description, uri, ip_address, and tags.
Add target destroy endpoint
Added DELETE /targets/{id} to archive a target. Returns a conflict if the target is
assigned to an active in-scope program.
Add program target list endpoint
Added a GET /programs/{program_id}/targets endpoint to list the targets belonging to a
program, with support for filtering (category, priority, coverage, status), free-text
search, sorting, and offset/limit pagination.
Only program admins and organization owners can access this endpoint.
Add program target create endpoint
Added a POST /programs/{program_id}/targets endpoint to create a target scoped to a program.
Targets created via this endpoint are associated with the program but are not added to the
Organization Asset Inventory.
Only program admins and organization owners can access this endpoint.
Add program target update endpoint
Added a PATCH /programs/{program_id}/targets/{id} endpoint to update a target scoped to a
program. Only supplied attributes are changed; the target is not added to the Organization
Asset Inventory.
Only program admins and organization owners can access this endpoint.
Add program target archive endpoint
Added a PATCH /programs/{program_id}/targets/{id}/archive endpoint to archive (soft-delete) a
target scoped to a program. Archiving is blocked when the target is in-scope on a live engagement
(unless override_engagement_validation is true) or present in a Cloudflare integration.
Only program admins and organization owners can access this endpoint.
Add program target unarchive endpoint
Added a PATCH /programs/{program_id}/targets/{id}/unarchive endpoint to unarchive (restore) a
previously archived target scoped to a program.
Only program admins and organization owners can access this endpoint.
Add engagement target list endpoint
Added a GET /engagements/{engagement_id}/targets endpoint to list the targets in
scope (and out of scope) for an engagement, sourced from the engagement’s latest
published brief, with offset/limit pagination.
Add target group create endpoint
Added POST /target_groups endpoint to create a target group (scope group) for a pen test engagement.
Write operations are rejected with a 409 Conflict when the engagement is finalizing, cancelled, or has finished.
Add target group update endpoint
Added PATCH /target_groups/{id} endpoint to update a target group (name, description, in_scope).
Omitted fields retain their current values. Write operations are rejected with a 409 Conflict
when the engagement is finalizing, cancelled, or has finished.
Add target group delete endpoint
Added DELETE /target_groups/{id} endpoint to delete a target group (scope group) for a pen test engagement.
Write operations are rejected with a 409 Conflict when the engagement is finalizing, cancelled, or has finished.
Add target group target create endpoint
Added POST /target_groups/{target_group_id}/targets to add a target to a target group.
Add target group target update endpoint
Added PATCH /target_groups/{target_group_id}/targets/{target_id} to update a target in a target group.
Add target group target delete endpoint
Added DELETE /target_groups/{target_group_id}/targets/{target_id} to remove a target from a target group.
