Skip to main content

API Changelog version 2.36.0

Released on September 03, 2026

Written by Helyette Mehouelley

GET /api/auth/orgs/

  • ⚠️ the response's body type changed from object to array<object> for status 200

  • ⚠️ deleted the query request parameter limit

  • ⚠️ deleted the query request parameter page

  • removed the optional property count from the response with the 200 status

  • removed the optional property next from the response with the 200 status

  • removed the optional property previous from the response with the 200 status

  • removed the optional property results from the response with the 200 status

GET /api/auth/orgs/arsenalstatus

  • ⚠️ api path removed without deprecation

GET /api/auth/orgs/default/

  • ⚠️ api path removed without deprecation

GET /api/auth/orgs/{id}/

  • added the required property identity/tenant_id to the response with the 200 status

POST /api/auth/orgs/{id}/brandimage

  • ⚠️ api path removed without deprecation

PUT /api/auth/orgs/{org_id}/settings/auto_easm

  • ⚠️ api path removed without deprecation

PUT /api/auth/orgs/{org_id}/settings/obh

  • ⚠️ api removed without deprecation

GET /api/auth/orgs/{org_id}/settings/sla

  • ⚠️ removed the required property auto_easm from the response with the 200 status

  • ⚠️ removed the required property auto_easm_activation_consumption from the response with the 200 status

  • ⚠️ removed the required property created_at from the response with the 200 status

  • ⚠️ removed the required property easm_credits_available from the response with the 200 status

  • ⚠️ removed the required property end_of_contract from the response with the 200 status

  • ⚠️ removed the required property id from the response with the 200 status

  • ⚠️ removed the required property is_poc from the response with the 200 status

  • ⚠️ removed the required property is_sso from the response with the 200 status

  • ⚠️ removed the required property max_easm_assets_allowed from the response with the 200 status

  • ⚠️ removed the required property max_pentested_assets_allowed from the response with the 200 status

  • ⚠️ removed the required property max_pentested_slot_allowed from the response with the 200 status

  • ⚠️ removed the required property name from the response with the 200 status

  • ⚠️ removed the required property outside_business_hours from the response with the 200 status

  • ⚠️ removed the required property outside_business_hours_enabled from the response with the 200 status

  • ⚠️ removed the required property owner from the response with the 200 status

  • ⚠️ removed the required property pentested_assets from the response with the 200 status

  • ⚠️ removed the required property pentested_slot_available from the response with the 200 status

  • ⚠️ removed the required property risk_insights_enabled from the response with the 200 status

  • ⚠️ removed the required property rotation_frequency from the response with the 200 status

  • ⚠️ removed the required property slug from the response with the 200 status

  • ⚠️ removed the required property teams_enabled from the response with the 200 status

  • ⚠️ removed the required property technologies_enabled from the response with the 200 status

  • ⚠️ removed the required property typosquatting_enabled from the response with the 200 status

  • ⚠️ removed the required property user_count from the response with the 200 status

  • added the optional property critical to the response with the 200 status

  • added the optional property high to the response with the 200 status

  • added the optional property info to the response with the 200 status

  • added the optional property low to the response with the 200 status

  • added the optional property medium to the response with the 200 status

  • removed the optional property is_active from the response with the 200 status

PUT /api/auth/orgs/{org_id}/settings/sla

  • ⚠️ removed the required property auto_easm from the response with the 200 status

  • ⚠️ removed the required property auto_easm_activation_consumption from the response with the 200 status

  • ⚠️ removed the required property created_at from the response with the 200 status

  • ⚠️ removed the required property easm_credits_available from the response with the 200 status

  • ⚠️ removed the required property end_of_contract from the response with the 200 status

  • ⚠️ removed the required property id from the response with the 200 status

  • ⚠️ removed the required property is_poc from the response with the 200 status

  • ⚠️ removed the required property is_sso from the response with the 200 status

  • ⚠️ removed the required property max_easm_assets_allowed from the response with the 200 status

  • ⚠️ removed the required property max_pentested_assets_allowed from the response with the 200 status

  • ⚠️ removed the required property max_pentested_slot_allowed from the response with the 200 status

  • ⚠️ removed the required property name from the response with the 200 status

  • ⚠️ removed the required property outside_business_hours from the response with the 200 status

  • ⚠️ removed the required property outside_business_hours_enabled from the response with the 200 status

  • ⚠️ removed the required property owner from the response with the 200 status

  • ⚠️ removed the required property pentested_assets from the response with the 200 status

  • ⚠️ removed the required property pentested_slot_available from the response with the 200 status

  • ⚠️ removed the required property risk_insights_enabled from the response with the 200 status

  • ⚠️ removed the required property rotation_frequency from the response with the 200 status

  • ⚠️ removed the required property slug from the response with the 200 status

  • ⚠️ removed the required property teams_enabled from the response with the 200 status

  • ⚠️ removed the required property technologies_enabled from the response with the 200 status

  • ⚠️ removed the required property typosquatting_enabled from the response with the 200 status

  • ⚠️ removed the required property user_count from the response with the 200 status

  • ⚠️ removed the request property is_active (media type: multipart/form-data)

  • ⚠️ removed the request property is_active (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property is_active (media type: application/json)

  • ⚠️ removed the request property name (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property name (media type: multipart/form-data)

  • ⚠️ removed the request property name (media type: application/json)

  • ⚠️ removed the request property slug (media type: multipart/form-data)

  • ⚠️ removed the request property slug (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property slug (media type: application/json)

  • added the new optional request property critical (media type: application/json)

  • added the new optional request property critical (media type: application/x-www-form-urlencoded)

  • added the new optional request property critical (media type: multipart/form-data)

  • added the new optional request property high (media type: application/x-www-form-urlencoded)

  • added the new optional request property high (media type: multipart/form-data)

  • added the new optional request property high (media type: application/json)

  • added the new optional request property info (media type: multipart/form-data)

  • added the new optional request property info (media type: application/json)

  • added the new optional request property info (media type: application/x-www-form-urlencoded)

  • added the new optional request property low (media type: application/x-www-form-urlencoded)

  • added the new optional request property low (media type: multipart/form-data)

  • added the new optional request property low (media type: application/json)

  • added the new optional request property medium (media type: application/json)

  • added the new optional request property medium (media type: application/x-www-form-urlencoded)

  • added the new optional request property medium (media type: multipart/form-data)

  • request body became optional

  • added the non-success response with the status 400

  • added the optional property critical to the response with the 200 status

  • added the optional property high to the response with the 200 status

  • added the optional property info to the response with the 200 status

  • added the optional property low to the response with the 200 status

  • added the optional property medium to the response with the 200 status

  • removed the optional property is_active from the response with the 200 status

GET /api/auth/orgs/{org_id}/users/

  • removed the optional property results/items/is_admin from the response with the 200 status

POST /api/auth/orgs/{org_id}/users/

  • ⚠️ removed the request property is_admin (media type: multipart/form-data)

  • ⚠️ removed the request property is_admin (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property is_admin (media type: application/json)

  • removed the optional property is_admin from the response with the 201 status

GET /api/auth/orgs/{org_id}/users/{id}/

  • removed the optional property is_admin from the response with the 200 status

GET /api/auth/tenants/

  • ⚠️ removed the required property items/brand_image from the response with the 200 status

  • ⚠️ removed the required property items/resources from the response with the 200 status

  • ⚠️ removed the required property items/updated_at from the response with the 200 status

GET /api/auth/tenants/{id}/

  • ⚠️ removed the required property brand_image from the response with the 200 status

GET /api/auth/tenants/{id}/logo

  • endpoint added

POST /api/auth/tenants/{id}/organizations/

  • ⚠️ removed the request property brand_image (media type: multipart/form-data)

  • ⚠️ removed the request property brand_image (media type: application/json)

  • ⚠️ removed the request property brand_image (media type: application/x-www-form-urlencoded)

  • added the new optional request property logo (media type: multipart/form-data)

  • added the new optional request property logo (media type: application/x-www-form-urlencoded)

  • added the new optional request property logo (media type: application/json)

PATCH /api/auth/tenants/{id}/organizations/{org_id}/

  • ⚠️ removed the request property brand_image (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property brand_image (media type: application/json)

  • ⚠️ removed the request property brand_image (media type: multipart/form-data)

  • added the new optional request property logo (media type: application/x-www-form-urlencoded)

  • added the new optional request property logo (media type: application/json)

  • added the new optional request property logo (media type: multipart/form-data)

GET /api/auth/user/current

  • ⚠️ removed the required property orgs from the response with the 200 status

PUT /api/auth/user/current/update

  • added the media type application/json for the response with the status 200

  • added the non-success response with the status 400

POST /api/auth/users/

  • ⚠️ removed the required property orgs/items/brand_image from the response with the 201 status

  • the response property orgs/items/tenant_id became not nullable for the status 201

POST /api/auth/users/import/csv

  • ⚠️ the request property orgs/items/tenant_id became not nullable (media type: application/x-www-form-urlencoded)

  • ⚠️ the request property orgs/items/tenant_id became not nullable (media type: multipart/form-data)

  • ⚠️ the request property orgs/items/tenant_id became not nullable (media type: application/json)

  • ⚠️ removed the required property orgs/items/brand_image from the response with the 200 status

  • ⚠️ removed the request property orgs/items/brand_image (media type: multipart/form-data)

  • ⚠️ removed the request property orgs/items/brand_image (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property orgs/items/brand_image (media type: application/json)

  • the response property orgs/items/tenant_id became not nullable for the status 200

GET /api/auth/users/{id}/

  • ⚠️ removed the required property orgs/items/brand_image from the response with the 200 status

  • the response property orgs/items/tenant_id became not nullable for the status 200

POST /api/auth/users/{id}/

  • ⚠️ removed the required property orgs/items/brand_image from the response with the 200 status

  • the response property orgs/items/tenant_id became not nullable for the status 200

PUT /api/auth/users/{id}/

  • ⚠️ removed the required property orgs/items/brand_image from the response with the 200 status

  • the response property orgs/items/tenant_id became not nullable for the status 200

POST /api/auth/users/{id}/deactivate

  • ⚠️ the request property orgs/items/tenant_id became not nullable (media type: multipart/form-data)

  • ⚠️ the request property orgs/items/tenant_id became not nullable (media type: application/x-www-form-urlencoded)

  • ⚠️ the request property orgs/items/tenant_id became not nullable (media type: application/json)

  • ⚠️ removed the required property orgs/items/brand_image from the response with the 200 status

  • ⚠️ removed the request property orgs/items/brand_image (media type: multipart/form-data)

  • ⚠️ removed the request property orgs/items/brand_image (media type: application/json)

  • ⚠️ removed the request property orgs/items/brand_image (media type: application/x-www-form-urlencoded)

  • the response property orgs/items/tenant_id became not nullable for the status 200

GET /api/auth/users/{id}/newpwd

  • ⚠️ removed the required property orgs/items/brand_image from the response with the 200 status

  • the response property orgs/items/tenant_id became not nullable for the status 200

PUT /api/auth/users/{id}/subscribe-mail

  • ⚠️ the request's body type changed from object to array<object> (media type: multipart/form-data)

  • ⚠️ the request's body type changed from object to array<object> (media type: application/x-www-form-urlencoded)

  • ⚠️ the request's body type changed from object to array<object> (media type: application/json)

  • ⚠️ removed the required property orgs/items/brand_image from the response with the 200 status

  • ⚠️ removed the request property email (media type: multipart/form-data)

  • ⚠️ removed the request property email (media type: application/json)

  • ⚠️ removed the request property email (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property first_name (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property first_name (media type: application/json)

  • ⚠️ removed the request property first_name (media type: multipart/form-data)

  • ⚠️ removed the request property last_name (media type: application/json)

  • ⚠️ removed the request property last_name (media type: multipart/form-data)

  • ⚠️ removed the request property last_name (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property role (media type: application/json)

  • ⚠️ removed the request property role (media type: multipart/form-data)

  • ⚠️ removed the request property role (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property username (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property username (media type: multipart/form-data)

  • ⚠️ removed the request property username (media type: application/json)

  • the response property orgs/items/tenant_id became not nullable for the status 200

POST /api/auth/users/{id}/{object_type}

  • ⚠️ the request property orgs/items/tenant_id became not nullable (media type: application/x-www-form-urlencoded)

  • ⚠️ the request property orgs/items/tenant_id became not nullable (media type: multipart/form-data)

  • ⚠️ the request property orgs/items/tenant_id became not nullable (media type: application/json)

  • ⚠️ removed the required property orgs/items/brand_image from the response with the 200 status

  • ⚠️ removed the request property orgs/items/brand_image (media type: application/x-www-form-urlencoded)

  • ⚠️ removed the request property orgs/items/brand_image (media type: multipart/form-data)

  • ⚠️ removed the request property orgs/items/brand_image (media type: application/json)

  • the response property orgs/items/tenant_id became not nullable for the status 200

GET /api/auth/vulns/

  • ⚠️ removed the enum value banned from the query request parameter asset_availability

  • ⚠️ removed the enum value down from the query request parameter asset_availability

  • ⚠️ removed the enum value hardening from the query request parameter solution_priority

  • ⚠️ removed the enum value high from the query request parameter solution_effort

  • ⚠️ removed the enum value low from the query request parameter solution_effort

  • ⚠️ removed the enum value medium from the query request parameter solution_effort

  • ⚠️ removed the enum value moderate from the query request parameter solution_priority

  • ⚠️ removed the enum value source_campaign from the query request parameter source

  • ⚠️ removed the enum value source_cybelangel from the query request parameter source

  • ⚠️ removed the enum value source_patrowl from the query request parameter source

  • ⚠️ removed the enum value source_ri_policy from the query request parameter source

  • ⚠️ removed the enum value source_ri_user from the query request parameter source

  • ⚠️ removed the enum value source_typosquatting from the query request parameter source

  • ⚠️ removed the enum value source_user from the query request parameter source

  • ⚠️ removed the enum value unknown from the query request parameter asset_availability

  • ⚠️ removed the enum value up from the query request parameter asset_availability

  • ⚠️ removed the enum value urgent from the query request parameter solution_priority

  • ⚠️ for the query request parameter asset_availability, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_effort, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_priority, the type was changed from string to array<string>

  • ⚠️ for the query request parameter source, the type was changed from string to array<string>

  • for the query request parameter source, the minLength was decreased from 1 to 0

GET /api/auth/vulns/severities

  • ⚠️ removed the enum value banned from the query request parameter asset_availability

  • ⚠️ removed the enum value down from the query request parameter asset_availability

  • ⚠️ removed the enum value hardening from the query request parameter solution_priority

  • ⚠️ removed the enum value high from the query request parameter solution_effort

  • ⚠️ removed the enum value low from the query request parameter solution_effort

  • ⚠️ removed the enum value medium from the query request parameter solution_effort

  • ⚠️ removed the enum value moderate from the query request parameter solution_priority

  • ⚠️ removed the enum value unknown from the query request parameter asset_availability

  • ⚠️ removed the enum value up from the query request parameter asset_availability

  • ⚠️ removed the enum value urgent from the query request parameter solution_priority

  • ⚠️ for the query request parameter asset_availability, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_effort, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_priority, the type was changed from string to array<string>

  • ⚠️ for the query request parameter source, the type was changed from string to array<string>

GET /api/auth/vulns/severities/over-time

  • ⚠️ removed the enum value banned from the query request parameter asset_availability

  • ⚠️ removed the enum value down from the query request parameter asset_availability

  • ⚠️ removed the enum value hardening from the query request parameter solution_priority

  • ⚠️ removed the enum value high from the query request parameter solution_effort

  • ⚠️ removed the enum value low from the query request parameter solution_effort

  • ⚠️ removed the enum value medium from the query request parameter solution_effort

  • ⚠️ removed the enum value moderate from the query request parameter solution_priority

  • ⚠️ removed the enum value unknown from the query request parameter asset_availability

  • ⚠️ removed the enum value up from the query request parameter asset_availability

  • ⚠️ removed the enum value urgent from the query request parameter solution_priority

  • ⚠️ for the query request parameter asset_availability, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_effort, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_priority, the type was changed from string to array<string>

  • ⚠️ for the query request parameter source, the type was changed from string to array<string>

GET /api/auth/vulns/severities/statistics

  • ⚠️ removed the enum value banned from the query request parameter asset_availability

  • ⚠️ removed the enum value down from the query request parameter asset_availability

  • ⚠️ removed the enum value hardening from the query request parameter solution_priority

  • ⚠️ removed the enum value high from the query request parameter solution_effort

  • ⚠️ removed the enum value low from the query request parameter solution_effort

  • ⚠️ removed the enum value medium from the query request parameter solution_effort

  • ⚠️ removed the enum value moderate from the query request parameter solution_priority

  • ⚠️ removed the enum value unknown from the query request parameter asset_availability

  • ⚠️ removed the enum value up from the query request parameter asset_availability

  • ⚠️ removed the enum value urgent from the query request parameter solution_priority

  • ⚠️ for the query request parameter asset_availability, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_effort, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_priority, the type was changed from string to array<string>

  • ⚠️ for the query request parameter source, the type was changed from string to array<string>

GET /api/auth/vulns/{id}/events

  • ⚠️ removed the enum value banned from the query request parameter asset_availability

  • ⚠️ removed the enum value down from the query request parameter asset_availability

  • ⚠️ removed the enum value hardening from the query request parameter solution_priority

  • ⚠️ removed the enum value high from the query request parameter solution_effort

  • ⚠️ removed the enum value low from the query request parameter solution_effort

  • ⚠️ removed the enum value medium from the query request parameter solution_effort

  • ⚠️ removed the enum value moderate from the query request parameter solution_priority

  • ⚠️ removed the enum value unknown from the query request parameter asset_availability

  • ⚠️ removed the enum value up from the query request parameter asset_availability

  • ⚠️ removed the enum value urgent from the query request parameter solution_priority

  • ⚠️ for the query request parameter asset_availability, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_effort, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_priority, the type was changed from string to array<string>

  • ⚠️ for the query request parameter source, the type was changed from string to array<string>

GET /api/auth/vulns/{id}/retests

  • ⚠️ removed the enum value banned from the query request parameter asset_availability

  • ⚠️ removed the enum value down from the query request parameter asset_availability

  • ⚠️ removed the enum value hardening from the query request parameter solution_priority

  • ⚠️ removed the enum value high from the query request parameter solution_effort

  • ⚠️ removed the enum value low from the query request parameter solution_effort

  • ⚠️ removed the enum value medium from the query request parameter solution_effort

  • ⚠️ removed the enum value moderate from the query request parameter solution_priority

  • ⚠️ removed the enum value unknown from the query request parameter asset_availability

  • ⚠️ removed the enum value up from the query request parameter asset_availability

  • ⚠️ removed the enum value urgent from the query request parameter solution_priority

  • ⚠️ for the query request parameter asset_availability, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_effort, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_priority, the type was changed from string to array<string>

  • ⚠️ for the query request parameter source, the type was changed from string to array<string>

GET /api/auth/vulns/{id}/tickets

  • ⚠️ removed the enum value banned from the query request parameter asset_availability

  • ⚠️ removed the enum value down from the query request parameter asset_availability

  • ⚠️ removed the enum value hardening from the query request parameter solution_priority

  • ⚠️ removed the enum value high from the query request parameter solution_effort

  • ⚠️ removed the enum value low from the query request parameter solution_effort

  • ⚠️ removed the enum value medium from the query request parameter solution_effort

  • ⚠️ removed the enum value moderate from the query request parameter solution_priority

  • ⚠️ removed the enum value unknown from the query request parameter asset_availability

  • ⚠️ removed the enum value up from the query request parameter asset_availability

  • ⚠️ removed the enum value urgent from the query request parameter solution_priority

  • ⚠️ for the query request parameter asset_availability, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_effort, the type was changed from string to array<string>

  • ⚠️ for the query request parameter solution_priority, the type was changed from string to array<string>

  • ⚠️ for the query request parameter source, the type was changed from string to array<string>

Components

  • removed the schema AutoEASMEnabled

  • removed the schema PaginatedOrganizationSerializerOutList

You can access the complete API documentation here.

Did this answer your question?