Skip to content
Valystrum

Platform

API & Automation Engine

Everything in the platform is available over an org-scoped, versioned API — and an internal event bus turns findings into action automatically.

APIGraphQLWebhooksEvent Bus

The Enterprise API (`/api/v1/{org}`) exposes assets, controls, evidence, findings, posture, risks, vendors, and remediation — authenticated by API key. A typed event bus emits 35 lifecycle events; an automation engine reacts to them with rules that create risks, open remediation items, and snapshot posture — durable on Redis Streams with retries and a dead-letter queue.

The developer surface

  • REST v1 + GraphQL

    Org-scoped, versioned REST plus a GraphQL endpoint over the same data model.

  • Signed webhooks

    HMAC-SHA256 signed delivery with five-retry exponential backoff and durable delivery records.

  • Typed event bus

    35 events across findings, risk, remediation, cloud posture, threat intel, and posture — exactly-once per consumer group.

# Pull your live posture score and failing controls
curl -H "Authorization: Bearer $VALYSTRUM_API_KEY" \
  https://app.valystrum.io/api/v1/acme/posture/breakdown

# List critical findings across cloud, EASM and vulnerabilities
curl -H "Authorization: Bearer $VALYSTRUM_API_KEY" \
  "https://app.valystrum.io/api/v1/acme/findings?severity=critical"

See how it works against your estate.

A 30-minute walkthrough against a sandbox of your scale, with one of our governance engineers.

Book a session
Explore the platform

Related