Skip to content

Wallarm API overview

Wallarm API provides interaction between components of the Wallarm system. You can use Wallarm API methods to create, get, or update the following instances:

  • vulnerabilities

  • attacks

  • incidents

  • users

  • clients

  • filter nodes

  • etc.

Description of API methods is given in the Wallarm API Console available from Wallarm Console → top right → ? → Wallarm API Console or directly by the link:

Wallarm API Console

API endpoint

API requests are sent to the following URL:

  • https://us1.api.wallarm.com/ for the US cloud

  • https://api.wallarm.com/ for the EU cloud

Authentication of API requests

You must be a verified user to make Wallarm API requests. The method of API requests authentication depends on the client sending the request:

Authentication of API requests

You must be a verified user to make Wallarm API requests. The method of API requests authentication depends on the client sending the request:

API Reference UI

A token is used for request authentication. The token is generated after successful authentication in your Wallarm account.

  1. Sign in to your Wallarm account using the link:

  2. Refresh the API Reference page using the link:

  3. Go to the required API method → the Try it out section, input parameter values, and Execute the request.

Your own client

API credentials and SSO

When SSO is enabled for the user, authentication for requests to Wallarm API via UUID and secret key becomes unavailable for this user. Find detailed information in the SSO configuration article.

Your UUID and secret key are used for request authentication.

  1. Sign in to your Wallarm account in the US Cloud or EU Cloud → Settings → API credentials.

  2. Copy the UUID value.

  3. Get the Secret key value:

    • If you know the secret key value, then you can continue using the known value. The Wallarm Console displays the encrypted value of your active secret key.

    • If you do not know the secret key value or it was lost, to generate the new secret key:

      1. Click Renew secret key.
      2. Confirm by entering your password.
      3. As soon as the new key is generated, copy its value. The secret key value will not be shown again.

      Reusing the secret key value

      The button Renew secret key generates the new value of the secret key and invalidates the previous value. To use the secret key securely:

      • Write down the key value in a secure place. The secret key value will not be shown again.
      • Reuse the stored key value in all requests to Wallarm API.
      • If you generated the new key value, make sure the previous value is not used in other API clients. If the previous value is in use, replace it with the newly generated secret value.

  4. Send the required API request passing the following values:

    • UUID in the X-WallarmAPI-UUID header parameter
    • Secret key in the X-WallarmAPI-Secret header parameter

Wallarm approach to API development and documentation

Wallarm API Reference is a single page application (SPA) with all displayed data being dynamically fetched from the API. This design drives Wallarm to use the API-first approach when new data and functionality is initially made available in the public API and as the next step is described in the API Reference. Normally all new functionality is released in parallel in both public API and API Reference, but sometimes new API changes are released ahead of API Reference changes, and some functionality is available via the public API only.

Wallarm API Reference is generated from the Swagger file using the Swagger UI tool. API Reference provides an easy way to learn about available API endpoints, methods, and data structures. It also provides a simple way to try all available endpoints.