[CyberCNS (ConnectSecure)] Permanently delete a managed company by id (from cns_list_companies). This removes the company and its associated data in ConnectSecure and cannot be undone. A 403 means the API key's user lacks delete access.

[CyberCNS (ConnectSecure)] Permanently delete a custom ticketing template by id (from cns_list_custom_ticketing_template). Cannot be undone.

[CyberCNS (ConnectSecure)] Get a single managed company by its id (discover ids with cns_list_companies). Returns the company's full record.

[CyberCNS (ConnectSecure)] Get the rolled-up statistics for a single company by id. Discover ids with cns_list_company_stats or cns_list_companies.

[CyberCNS (ConnectSecure)] List the global application-baseline plan entries — the tenant-wide baseline of approved/expected applications used to flag baseline deviations. Filter with condition and sort with order_by. Paginated with skip + limit. Use cns_get_app_baseline_plan_global for one entry; see the company/asset baseline reads for scoped variants.

[CyberCNS (ConnectSecure)] List Windows OS patch/upgrade compatibility status across assets (e.g. which assets can move to a newer Windows build). Filter with condition (e.g. condition=status=true) and sort with order_by (e.g. order_by=created). Paginated with skip + limit.

[CyberCNS (ConnectSecure)] List the managed companies (clients) in your ConnectSecure tenant. Returns each company's id, name, and configuration. Filter with the ConnectSecure condition language (e.g. condition=name:startswith:abc) and sort with order_by (e.g. order_by=created or order_by=created:desc). Paginated with skip + limit. Use the returned company id with cns_get_companies, and as company_id inside condition on asset/report tools.

[CyberCNS (ConnectSecure)] List rolled-up statistics per company (asset counts, external/internal totals, risk figures). Filter with condition (e.g. condition=total_assets_external>1000) and sort with order_by. Paginated with skip + limit. Use cns_get_company_stats for one company's stats.

[CyberCNS (ConnectSecure)] List the custom ticketing templates configured for the tenant (used to shape tickets pushed to integrated PSA/ticketing systems). Filter with condition (e.g. condition=template_name:like:custom) and sort with order_by (e.g. order_by=created:desc). Paginated with skip + limit. Use cns_get_custom_ticketing_template for one template.

[CyberCNS (ConnectSecure)] Create or update a managed company. Provide a JSON object body with the company fields (e.g. name and any tenant-specific configuration); include the record id to update an existing company, omit it to create a new one. A 403 means the API key's user lacks write access — re-issue the key from a user with company management rights.

[CyberCNS (ConnectSecure)] Create or update a custom ticketing template. Provide a JSON object body with the template fields (e.g. template_name and the template body/mapping); include the id to update an existing template, omit it to create a new one.

[CyberCNS (ConnectSecure)] Permanently delete an agent-to-discovery-settings mapping by id (from cns_list_agent_discoverysettings_mapping). This unbinds the agent from those discovery settings and cannot be undone.

[CyberCNS (ConnectSecure)] Permanently delete a scan credential by id (from cns_list_credentials). Agents mapped to it will no longer be able to use it. Cannot be undone.

[CyberCNS (ConnectSecure)] Permanently delete a discovery-settings record by id (from cns_list_discovery_settings). Cannot be undone.

[CyberCNS (ConnectSecure)] Get a single scanning agent by its id (from cns_list_agents). Returns the agent's full detail. To reset/re-register agents, use cns_reset_agents.

[CyberCNS (ConnectSecure)] Get a single scan credential record by id (from cns_list_credentials). Returns credential metadata only — never the raw secret.

[CyberCNS (ConnectSecure)] List the mappings that bind scanning agents to the credentials they use. Filter with condition (e.g. condition=agent_id=123 or condition=credentials_id=789) and sort with order_by (e.g. order_by=created_at). Paginated with skip + limit. Discover agent ids with cns_list_agents and credential ids with cns_list_credentials.

[CyberCNS (ConnectSecure)] List the mappings that bind scanning agents to discovery settings. Filter with condition (e.g. condition=agent_id=123) and sort with order_by (e.g. order_by=created). Paginated with skip + limit. Discover agent ids with cns_list_agents and discovery-settings ids with cns_list_discovery_settings.

[CyberCNS (ConnectSecure)] List the scanning agents associated with your companies. Returns each agent's id, type, OS, and last-reported time. Filter with the condition language (e.g. condition=os_type:windows, condition=agent_type:desktop, condition=last_reported:<2023-04-01, or condition=company_id:123) and sort with order_by (e.g. order_by=name). Paginated with skip + limit. Use cns_get_agents for one agent.

[CyberCNS (ConnectSecure)] List the scan credentials configured for a company (used by agents to authenticate to targets). Returns credential metadata only — never raw secrets. Filter with condition (e.g. condition=credential_type=ssh, condition=address_type=internal, or condition=is_excluded=true) and sort with order_by (e.g. order_by=created). Paginated with skip + limit. Use cns_get_credentials for one credential.

[CyberCNS (ConnectSecure)] List the discovery settings for a company (the address ranges/targets, exclusions, tags, and profiles that steer network discovery). Filter with condition (e.g. condition=name="example") and sort with order_by (e.g. order_by=created). Paginated with skip + limit. Use cns_get_discovery_settings for one setting.

[CyberCNS (ConnectSecure)] Create or update a mapping binding a scanning agent to a set of credentials. Provide a JSON object body with at least agent_id and credentials_id; include the record id to update, omit it to create. Discover the ids with cns_list_agents and cns_list_credentials.

[CyberCNS (ConnectSecure)] Create or update a mapping binding a scanning agent to a set of discovery settings. Provide a JSON object body with at least agent_id and discovery_settings_id; include the record id to update, omit it to create.

[CyberCNS (ConnectSecure)] Create or update a scan credential. Provide a JSON object body with the credential fields (e.g. credential_type, username, secret, address_type); include the id to update, omit it to create. The body contains a secret — handle it as sensitive material.

[CyberCNS (ConnectSecure)] Create or update a discovery-settings record. Provide a JSON object body with the settings fields (e.g. name, address_type, address, ignore_ports, is_excluded, manual_tags, target_ip, custom_profile_id); include the id to update, omit it to create.

[CyberCNS (ConnectSecure)] Permanently delete an event set by id (from cns_list_event_set). Cannot be undone.

[CyberCNS (ConnectSecure)] Permanently delete a scan scheduler by id (from cns_list_scheduler). Cannot be undone.

[CyberCNS (ConnectSecure)] Trigger an external (attack-surface) scan. Provide a JSON object body specifying the scan target/scope (e.g. company_id and the domains/hosts to scan). This starts scan work; poll cns_list_jobs_view or cns_list_scheduler for progress.

[CyberCNS (ConnectSecure)] Get a single scan/processing job by id (from cns_list_jobs_view). Returns the job's full detail.

[CyberCNS (ConnectSecure)] List the event sets (notification/alert rule groups) configured for the tenant. Filter with condition (e.g. condition=name:event-set-1) and sort with order_by (e.g. order_by=created). Paginated with skip + limit. Use cns_get_event_set for one event set.

[CyberCNS (ConnectSecure)] List scan/processing jobs for your companies (status, timing, and outcome of scans and background work). Filter with the condition language (jobs are commonly filtered by company_id and status) and sort with order_by (e.g. order_by=created_at). Paginated with skip + limit. Use cns_get_jobs_view for one job.

[CyberCNS (ConnectSecure)] List report-generation jobs (status and outcome of report builds). Filter with the condition language and sort with order_by. Paginated with skip + limit. Use cns_get_report_jobs_view for one report job; see the report_builder tools to create report jobs and fetch download links.

[CyberCNS (ConnectSecure)] List the scan schedulers configured for your companies (the recurring scan/report schedules). Filter with the condition language and sort with order_by (e.g. order_by=created:desc). Paginated with skip + limit. Use cns_get_scheduler for one scheduler; cns_save_scheduler to create/update; cns_update_schedule / cns_remove_schedule for schedule actions.

[CyberCNS (ConnectSecure)] Remove a scan schedule. Provide a JSON object body identifying the schedule to remove (e.g. its id). This stops the recurring scan and cannot be undone. Discover schedules with cns_list_scheduler.

[CyberCNS (ConnectSecure)] Reset one or more scanning agents. Provide a JSON object body identifying the agents to reset (e.g. their ids or a company_id). Resetting forces the agents to re-register/re-initialize and can interrupt in-progress scans — treat as a disruptive action. Discover agents with cns_list_agents.

[CyberCNS (ConnectSecure)] Create or update an event set (notification/alert rule group). Provide a JSON object body with the event-set fields (e.g. name and the rules/thresholds); include the id to update, omit it to create.

[CyberCNS (ConnectSecure)] Create or update a scan scheduler. Provide a JSON object body with the scheduler fields (e.g. name, schedule/recurrence, company_id, scan type); include the id to update, omit it to create.

[CyberCNS (ConnectSecure)] Update an existing scan schedule. Provide a JSON object body identifying the schedule (e.g. its id) and the fields to change (e.g. recurrence, next run). Use cns_list_scheduler to discover schedules; use cns_remove_schedule to remove one.

[CyberCNS (ConnectSecure)] Permanently delete an application-baseline rule by id. Assets are re-graded against the remaining rules — this cannot be undone. id comes from cns_list_application_baseline_rules.

[CyberCNS (ConnectSecure)] Permanently delete a backup-software record by id. This cannot be undone. id comes from cns_list_backup_software.

[CyberCNS (ConnectSecure)] List the application-baseline plan evaluated at the asset level — which baseline applications each asset has, is missing, or has extra. Offset paginated (skip/limit, max 5000). Optional condition filter (e.g. "company_id=123") and order_by. Pair with cns_get_app_baseline_plan_assets for a single record.

[CyberCNS (ConnectSecure)] List the application-baseline plan rolled up at the company level. Offset paginated (skip/limit, max 5000), optional condition filter and order_by. Pair with cns_get_app_baseline_plan_company for a single record.

[CyberCNS (ConnectSecure)] List the application-baseline rules — the policy of approved / unapproved applications used to grade assets. Offset paginated (skip/limit, max 5000), optional condition (e.g. "os_type=windows") and order_by. Create/update via cns_save_application_baseline_rules; delete via cns_delete_application_baseline_rules.

[CyberCNS (ConnectSecure)] List detected backup-software inventory across the company (e.g. Veeam, Acronis) used for backup-coverage posture. Offset paginated (skip/limit, max 5000), optional condition (e.g. "name:Veeam") and order_by. Create/update via cns_save_backup_software; delete via cns_delete_backup_software.

[CyberCNS (ConnectSecure)] Create or update an application-baseline rule. Pass the full rule object as JSON (include the record id to update an existing rule; omit it to create). A 401/403 means the CyberCNS API key lacks write access — re-issue it.

[CyberCNS (ConnectSecure)] Create or update a backup-software definition. Pass the full object as JSON (include the id to update; omit to create).

[CyberCNS (ConnectSecure)] Permanently delete a compliance assessment by id, discarding its recorded progress and answers. This cannot be undone. id comes from cns_list_compliance_assessment.

[CyberCNS (ConnectSecure)] Permanently delete a custom compliance/scan profile by id. Scans/assessments referencing it revert to the built-in defaults — this cannot be undone. id comes from cns_list_custom_profile.

[CyberCNS (ConnectSecure)] Permanently delete an EDR coverage definition by id. This cannot be undone. id comes from cns_list_edr.

[CyberCNS (ConnectSecure)] Permanently delete a PII-scan-settings record by id. This cannot be undone. id comes from cns_list_pii_scan_settings.

[CyberCNS (ConnectSecure)] List external attack-surface scan results (subdomains, emails, leaked creds/hashes, DNS/SPF/DMARC/MX findings, S3 buckets, exposed employees) discovered for the company's monitored domains. Offset paginated (skip/limit, max 5000), optional condition and order_by. Scans are launched against domains managed via cns_list_attack_surface_domain / cns_save_attack_surface_domain.

[CyberCNS (ConnectSecure)] List compliance assessments for the company (template name/status, completed sections, type, completion time). Offset paginated (skip/limit, max 5000), optional condition (e.g. "template_status:true") and order_by. Available assessment templates come from cns_list_compliance_types. Create/update via cns_save_compliance_assessment; delete via cns_delete_compliance_assessment.

[CyberCNS (ConnectSecure)] List custom compliance/scan profiles defined for the company (tailored check sets layered on top of the built-in compliance templates). Offset paginated (skip/limit, max 5000), optional condition and order_by. Create/update via cns_save_custom_profile; delete via cns_delete_custom_profile.

[CyberCNS (ConnectSecure)] List EDR (endpoint detection & response) coverage definitions for the company — which EDR products are recognized/expected on assets. Offset paginated (skip/limit, max 5000), optional condition and order_by. Create/update via cns_save_edr; delete via cns_delete_edr.

[CyberCNS (ConnectSecure)] List PII-scan settings for the company (which sensitive-data patterns/paths the scanner looks for). Offset paginated (skip/limit, max 5000), optional condition (e.g. "name:contains:example") and order_by. Create/update via cns_save_pii_scan_settings; delete via cns_delete_pii_scan_settings.

[CyberCNS (ConnectSecure)] Create or update a compliance assessment. Pass the full object as JSON (include the id to update; omit to create). Requires company_id and tenantid per the assessment schema.

[CyberCNS (ConnectSecure)] Create or update a custom compliance/scan profile. Pass the full object as JSON (include the id to update; omit to create).

[CyberCNS (ConnectSecure)] Create or update an EDR coverage definition. Pass the full object as JSON (include the id to update; omit to create).

[CyberCNS (ConnectSecure)] Create or update a PII-scan-settings record. Pass the full object as JSON (include the id to update; omit to create).

[CyberCNS (ConnectSecure)] Permanently delete a monitored attack-surface domain by id, stopping future scans of it. This cannot be undone. id comes from cns_list_attack_surface_domain.

[CyberCNS (ConnectSecure)] Permanently delete an auto-tagging rule by id. Existing tags already applied are left in place; only the automatic rule is removed. This cannot be undone. id comes from cns_list_tag_rules.

[CyberCNS (ConnectSecure)] Permanently delete a tag by id. It is removed from every asset/company it was applied to — this cannot be undone. id comes from cns_list_tags.

[CyberCNS (ConnectSecure)] List the external domains monitored for attack-surface scanning. Offset paginated (skip/limit, max 5000), optional condition (e.g. "domain=example.com") and order_by. Scan findings for these domains are read via cns_list_attack_surface_results. Create/update via cns_save_attack_surface_domain; delete via cns_delete_attack_surface_domain.

[CyberCNS (ConnectSecure)] List custom domains configured for the company (e.g. white-label / branding domains and their status). Offset paginated (skip/limit, max 5000), optional condition (e.g. "status:active") and order_by. The company branding domain + SSL is set via cns_set_custom_domain.

[CyberCNS (ConnectSecure)] List auto-tagging rules — conditions that automatically apply tags (from cns_list_tags) to matching assets. Offset paginated (skip/limit, max 5000), optional condition and order_by. Create/update via cns_save_tag_rules; delete via cns_delete_tag_rules.

[CyberCNS (ConnectSecure)] List tags defined for the company (labels applied to assets/companies for grouping and filtering across reports). Offset paginated (skip/limit, max 5000), optional condition and order_by. Create/update via cns_save_tags; delete via cns_delete_tags. Auto-tagging rules are managed via cns_list_tag_rules.

[CyberCNS (ConnectSecure)] Add or update a monitored attack-surface domain. Pass the full object as JSON (include the id to update; omit to create). Newly added domains become eligible for external attack-surface scanning.

[CyberCNS (ConnectSecure)] Create or update an auto-tagging rule. Pass the full object as JSON (include the id to update; omit to create).

[CyberCNS (ConnectSecure)] Create or update a tag. Pass the full object as JSON (include the id to update; omit to create).

[CyberCNS (ConnectSecure)] Set the company's custom branding domain and upload its SSL certificate. Sent as multipart/form-data. Pass a JSON object whose properties become form fields: domain_name (the branding domain), ssl_cert (the SSL certificate, PEM text) and ssl_privkey (the private key, PEM text) are attached as file parts; any other properties are sent as plain text fields. Note: the exact multipart field set is inferred from the V4 API documentation and may need adjustment against a live pod.

[CyberCNS (ConnectSecure)] Delete an asset by id (from cns_list_assets). This permanently removes the asset and its scan history from ConnectSecure — it cannot be undone. A 401/403 means the CyberCNS API key lacks delete access — re-issue it for a user with the required role.

[CyberCNS (ConnectSecure)] Get a single asset by id (discover ids with cns_list_assets). Returns the asset's full inventory record. For narrower per-asset detail see cns_get_asset_view, cns_get_asset_stats, or the hardware tools (cns_get_bios_info, cns_get_asset_storages, …).

[CyberCNS (ConnectSecure)] List per-asset compliance report-card records (an asset's pass/fail posture against the compliance benchmarks it is assessed on). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123, company_id:123). Use cns_get_asset_compliance_report_card for one record.

[CyberCNS (ConnectSecure)] List network interfaces discovered on assets (NIC name, MAC, IP addresses, and link state). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_asset_interface for one record.

[CyberCNS (ConnectSecure)] List open network ports discovered on assets (port number, protocol, state, and the service behind it). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_asset_ports for one record; the report-query cns_query_ports_assets_details joins ports to asset detail.

[CyberCNS (ConnectSecure)] List per-asset security report data (the asset-level security posture rows backing the security report). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Note: cns_query_asset_security_report_data is a distinct report-query variant with the same underlying data. Use cns_get_asset_security_report_data for one record.

[CyberCNS (ConnectSecure)] List network shares discovered on assets (SMB/CIFS share name, path, and permissions). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_asset_shares for one record; see cns_list_asset_user_shares for the per-user share breakdown.

[CyberCNS (ConnectSecure)] List per-asset statistics (vulnerability, problem and compliance counts rolled up per asset). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. company_id:123). Use cns_get_asset_stats for one record.

[CyberCNS (ConnectSecure)] List Windows services with unquoted service paths on assets — a privilege-escalation weakness (CyberCNS spells the endpoint 'unqouted'). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_asset_unqouted_services for one record.

[CyberCNS (ConnectSecure)] List per-user share access discovered on assets (which users/groups can reach each network share). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_asset_user_shares for one record.

[CyberCNS (ConnectSecure)] List the enriched asset-view records (a denormalized asset summary joining company, OS, risk and scan metadata). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. company_id:123). Use cns_get_asset_view for one record.

[CyberCNS (ConnectSecure)] List the assets (endpoints, servers, network/firewall devices) discovered and scanned across your ConnectSecure companies. Offset-paginated via skip/limit (max 5000). Use the condition filter to scope by company (e.g. company_id:123) or other fields (field:operator:value, e.g. created:gt:2022-01-01). Use cns_get_assets for one asset's full detail, and the returned id with cns_delete_assets. Related detail lives in cns_list_asset_view / cns_list_asset_stats.

[CyberCNS (ConnectSecure)] Create or update an asset. Provide a JSON object body with the asset fields (include the record id to update an existing asset, omit it to create). This is a write (Pro tier). A 401/403 means the CyberCNS API key lacks write access — re-issue it for a user with the required role.

[CyberCNS (ConnectSecure)] List device drivers installed on assets (driver name, version, provider, and signing status). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_asset_installed_drivers for one record.

[CyberCNS (ConnectSecure)] List Microsoft Support Diagnostic Tool (MSDT) findings on assets — used to surface the Follina-class MSDT exposure. Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_asset_msdt for one record.

[CyberCNS (ConnectSecure)] List storage volumes and disks discovered on assets (drive letter/mount, filesystem, total and free capacity, encryption state). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_asset_storages for one record.

[CyberCNS (ConnectSecure)] List video/GPU adapter info discovered on assets (adapter name, driver version, resolution, VRAM). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_asset_video_info for one record.

[CyberCNS (ConnectSecure)] List Windows assets that have a pending reboot (patches/updates staged but not yet applied until restart). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123, company_id:123). Use cns_get_asset_windows_reboot_required for one record.

[CyberCNS (ConnectSecure)] List BIOS/firmware info discovered on assets (vendor, version, release date, serial). Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_bios_info for one record.

[CyberCNS (ConnectSecure)] List browser extensions/add-ons discovered on assets (browser, extension name, version, and enabled state) — used to surface risky or unwanted add-ons. Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_browser_extensions for one record.

[CyberCNS (ConnectSecure)] List the TLS/SSL cipher suites observed on assets (protocol version, cipher name, and strength) — used to flag weak or deprecated ciphers. Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123). Use cns_get_ciphers_view for one record.

[CyberCNS (ConnectSecure)] List Windows protection (Defender/antivirus) status per asset — real-time protection, definition freshness, firewall and tamper-protection state. Offset-paginated via skip/limit (max 5000); condition filter is field:operator:value (e.g. asset_id:123, company_id:123). Use cns_get_windows_protection_status for one record.

[CyberCNS (ConnectSecure)] Delete a vulnerability suppression by its id (from cns_list_suppress_vulnerability). This permanently removes the suppression, so the vulnerability will reappear in scans and reports. A 403 means the API key's user lacks write permission — re-issue the key from an operator/write role.

[CyberCNS (ConnectSecure)] Get a single asset firewall policy by its id (from cns_list_asset_firewall_policy). Returns the full policy detail: policy_type, path, policy_status, last_updated, asset_id, company_id.

[CyberCNS (ConnectSecure)] Get a single firewall group by its id (from cns_list_firewall_groups). Returns the full group detail: name, description, group_type, members, additional_info, group_id, asset_id, company_id.

[CyberCNS (ConnectSecure)] Get a single firewall interface by its id (from cns_list_firewall_interfaces). Returns the full interface detail: name, description, parent_interface, zone, interface_type, ip, additional_info, interface_id, asset_id, company_id.

[CyberCNS (ConnectSecure)] Get a single firewall license by its id (from cns_list_firewall_license). Returns the full license detail: name, expires, status, type, version, additional_info, license_id, asset_id, company_id.

[CyberCNS (ConnectSecure)] Get a single firewall rule by its id (from cns_list_firewall_rules). Returns the full rule detail: name, description, rule_type, action, status, protocol, source/destination address, port, interface, additional_info, rule_id, asset_id, company_id.

[CyberCNS (ConnectSecure)] Get a single firewall user by its id (from cns_list_firewall_users). Returns the full user detail: name, email, description, user_type, group_name, additional_info, user_id, asset_id, company_id.

[CyberCNS (ConnectSecure)] Get a single firewall zone by its id (from cns_list_firewall_zones). Returns the full zone detail: name, interfaces, description, zone_type, additional_info, zone_id, asset_id, company_id.

[CyberCNS (ConnectSecure)] Get a single remediated software/asset record by its id (from cns_list_remediated). Returns the full detail: name, full_name, release, port, version, publisher, software_type, problem_key, first_discovered, and vulnerability counts.

[CyberCNS (ConnectSecure)] Get a single suppressed vulnerability by its id (from cns_list_suppress_vulnerability). Returns the full suppression detail: problem_id, problem_name, solution_id, check_id, reason, comments, suppression_status, suppressed_on/till, approver, requester, asset, and company.

[CyberCNS (ConnectSecure)] List asset firewall policies discovered by network/firewall scans. Each item includes policy_type, path, policy_status, last_updated, asset_id, and company_id. Filter with the condition grammar (e.g. condition=policy_type=web, condition=asset_id=123, condition=company_id=456), sort with order_by (e.g. last_updated), and page with skip/limit. Use cns_get_asset_firewall_policy for one policy's full detail.

[CyberCNS (ConnectSecure)] List firewall address/service groups discovered on scanned firewall assets. Each item includes name, description, group_type, members, group_id, asset_id, and company_id. Filter with the condition grammar (e.g. condition=name:contains:example, condition=group_type:eq:custom, condition=company_id:eq:123), sort with order_by, page with skip/limit. Use cns_get_firewall_groups for one group's detail.

[CyberCNS (ConnectSecure)] List firewall interfaces discovered on scanned firewall assets. Each item includes name, description, parent_interface, zone, interface_type, ip, interface_id, asset_id, and company_id. Filter with the condition grammar (e.g. condition=name:contains:eth, condition=zone:in:dmz,internal, condition=interface_type:eq:physical, condition=ip:startswith:192.168.), sort with order_by, page with skip/limit. Use cns_get_firewall_interfaces for one interface's detail.

[CyberCNS (ConnectSecure)] List firewall license records discovered on scanned firewall assets. Each item includes name, expires, status, type, version, license_id, asset_id, and company_id. Filter with the condition grammar (e.g. condition=status=active, condition=type=subscription, condition=expires<2023-06-30, condition=company_id=123), sort with order_by (e.g. expires), page with skip/limit. Use cns_get_firewall_license for one license's detail.

[CyberCNS (ConnectSecure)] List firewall rules discovered on scanned firewall assets. Each item includes name, description, rule_type, action, status, protocol, source_address/port/interface, destination_address/port/interface, rule_id, asset_id, and company_id. Filter with the condition grammar (e.g. condition=rule_type='allow', condition=status='active', condition=source_address='192.168.1.0/24'), sort with order_by, page with skip/limit. Use cns_get_firewall_rules for one rule's detail. NOTE: this is the /r/asset/firewall_rules asset-inventory read — the OS-level firewall ruleset from live scans is a separate tool, cns_query_asset_firewall_rules.

[CyberCNS (ConnectSecure)] List firewall users discovered on scanned firewall assets. Each item includes name, email, description, user_type, group_name, user_id, asset_id, and company_id. Filter with the condition grammar (e.g. condition=name:John, condition=user_type:admin, condition=email:john@example.com), sort with order_by, page with skip/limit. Use cns_get_firewall_users for one user's detail.

[CyberCNS (ConnectSecure)] List firewall security zones discovered on scanned firewall assets. Each item includes name, interfaces, description, zone_type, zone_id, asset_id, and company_id. Filter with the condition grammar (e.g. condition=name='Zone 1', condition=zone_type='internal', condition=asset_id=123), sort with order_by (e.g. name), page with skip/limit. Use cns_get_firewall_zones for one zone's detail.

[CyberCNS (ConnectSecure)] List remediated software/assets — software whose vulnerabilities have been resolved. Each item includes name, full_name, release, version, publisher, software_type, problem_key, first_discovered, vulnerability counts (critical_vuls_count, high_vuls_count, medium_vuls_count, low_vuls_count, vul_count), asset_id, and company_id. Filter with the condition grammar (e.g. condition=critical_vuls_count>0, condition=high_vuls_count>0), sort with order_by, page with skip/limit. Use cns_get_remediated for one record's detail.

[CyberCNS (ConnectSecure)] List suppressed vulnerabilities. Each item includes problem_id, problem_name, solution_id, check_id, url, reason, suppress_comments, suppression_status, suppressed_on, suppressed_till, approved_by, requested_by, company_name, asset_name, asset_id, and company_id. Filter with the condition grammar (e.g. condition=custom, condition=approved, condition=pending, condition=all), sort with order_by, page with skip/limit. Use cns_get_suppress_vulnerability for one record's detail, cns_save_suppress_vulnerability to create/update, and cns_delete_suppress_vulnerability to remove a suppression.

[CyberCNS (ConnectSecure)] Create or update a vulnerability suppression — marks a vulnerability as suppressed so it is excluded from future reports. Provide a JSON object body with the vulnerability's identifying fields: problem_id (the vulnerability/problem id), problem_name, solution_id, check_id, reason (why it is being suppressed), plus optional suppress_comments, suppressed_till, and asset_id/company_id scope. A 403 means the API key's user lacks write permission — re-issue the key from an operator/write role. NOTE (documented-floor gap): the vendor DOCX shows these fields as query params; StackJack posts them as a JSON body per the connector's uniform write convention — verify field placement against your pod's live Swagger if a write is rejected.

[CyberCNS (ConnectSecure)] Delete an integration company mapping by its id (from cns_list_company_mappings). This permanently removes the link between the source company and the destination integration company/site. A 403 means the API key's user lacks write permission — re-issue the key from an operator/write role.

[CyberCNS (ConnectSecure)] Delete an integration credential by its id (from cns_list_integration_credentials). This permanently removes the stored connection to the third-party system; integration rules and company mappings that reference it will stop working. A 403 means the API key's user lacks write permission — re-issue the key from an operator/write role.

[CyberCNS (ConnectSecure)] Delete an integration rule by its id (from cns_list_integration_rules). This permanently removes the event-to-action automation. A 403 means the API key's user lacks write permission — re-issue the key from an operator/write role.

[CyberCNS (ConnectSecure)] Get a single integration company mapping by its id (from cns_list_company_mappings). Returns the full mapping detail: integration_name, source/destination company and site, notification and consent settings, configuration, integration_rules, credential_id, company_id.

[CyberCNS (ConnectSecure)] Get a single integration credential by its id (from cns_list_integration_credentials). Returns the credential detail: name, integration_name, params, ticket_url, company_id.

[CyberCNS (ConnectSecure)] Get a single integration rule by its id (from cns_list_integration_rules). Returns the rule detail: name, is_default, integration_name, integration_params, credential_id, event_set_id.

[CyberCNS (ConnectSecure)] List integration company mappings — each links a ConnectSecure source company to a destination integration company/site. Items include integration_name, source_company_name, dest_company_name, dest_company_id, site_name, site_id, notification settings, credential_id, company_id, and id. Filter with the condition grammar (e.g. condition=source_company_name:ABC, condition=dest_company_id:123, condition=integration_name:MyIntegration), sort with order_by, page with skip/limit. Use cns_get_company_mappings for one mapping's detail.

[CyberCNS (ConnectSecure)] List integration credentials — the stored connections to third-party PSA/RMM/ticketing systems. Items include name, integration_name, params, ticket_url, company_id, and id. Filter with the condition grammar (e.g. condition=name:example_integration, condition=company_id:123, condition=tenantid:456), sort with order_by, page with skip/limit. Use cns_get_integration_credentials for one credential's detail.

[CyberCNS (ConnectSecure)] List integration rules — the automation rules that map ConnectSecure events to third-party actions (e.g. ticket creation). Items include name, is_default, integration_name, integration_params, credential_id, event_set_id, and id. Filter with the condition grammar (e.g. condition=name:test, condition=integration_name:salesforce, condition=tenantid:123), sort with order_by, page with skip/limit. Use cns_get_integration_rules for one rule's detail.

[CyberCNS (ConnectSecure)] Create or update an integration company mapping — links a ConnectSecure source company to a destination integration company/site. Provide a JSON object body with fields such as integration_name, source_company_name, dest_company_name, dest_company_id, site_name, site_id, credential_id, integration_rules, and notification/consent settings (enable_notification, no_notification, consent_enabled). Include the existing id to update an existing mapping. A 403 means the API key's user lacks write permission — re-issue the key from an operator/write role.

[CyberCNS (ConnectSecure)] Create or update an integration credential — the stored connection to a third-party PSA/RMM/ticketing system. Provide a JSON object body with fields such as name, integration_name, params (the integration's connection settings, which may include API keys/tokens), and ticket_url. Include the existing id to update. WARNING: the params object may carry SECRET credential material for the external system — treat the body as sensitive. A 403 means the API key's user lacks write permission — re-issue the key from an operator/write role.

[CyberCNS (ConnectSecure)] Create or update an integration rule — the automation that maps ConnectSecure events to a third-party action (e.g. ticket creation). Provide a JSON object body with fields such as name, is_default, integration_name, integration_params, credential_id (from cns_list_integration_credentials), and event_set_id. Include the existing id to update. A 403 means the API key's user lacks write permission — re-issue the key from an operator/write role.

[CyberCNS (ConnectSecure)] Query the asset open-ports report: TCP/UDP ports discovered across assets with protocol, service, and secure/insecure classification. Pair with cns_query_ports_assets_details for the per-asset join. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query the installed-software inventory across assets (software name, version, publisher, type). Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query discovered SSL/TLS certificate information across assets (subject, issuer, validity window, expiry). Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query aggregate compliance pass/fail counts across the environment. See the Slice 7 compliance query tools (cns_query_compliance_check_count, cns_query_asset_compliance_details) for per-check and per-asset breakdowns. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query the distinct list of agent names — a lookup helper for building filters and dropdowns. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query the distinct list of asset IP addresses — a lookup helper for building filters. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query the distinct list of asset (host) names — a lookup helper for building filters. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query the distinct list of discovered network protocols — a lookup helper for building filters. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query the distinct list of operating systems observed across assets — a lookup helper for building OS filters. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query the distinct list of platforms (Windows / Linux / macOS / network / etc.) — a lookup helper for building filters. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query the distinct list of tags applied across assets and companies — a lookup helper for building tag filters. See cns_query_tags_view for tag assignments with counts. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query the event-generated tickets report (tickets raised from monitored events). See cns_query_notification_tickets_view for the notification-ticket view. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query assets grouped/filtered by a specific problem (vulnerability or misconfiguration) — which assets are affected by a given problem. See the Slice 6 problems tools for problem summaries. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query one company's lightweight asset list (minimal fields — id, host name, company) for fast per-company enumeration. companyId is REQUIRED: CyberCNS returns an EMPTY result (HTTP 200, no error) when company_id is missing, so there is no tenant-wide form of this query. For full asset detail use cns_list_assets / cns_get_assets. Offset-paged (skip/limit) with a SQL-style condition WHERE filter (e.g. host_name LIKE '%DESKTOP%') and an order_by sort.

[CyberCNS (ConnectSecure)] Query the notification-tickets report (tickets raised from notifications). This is the canonical form of the notification_tickets_view report. Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.

[CyberCNS (ConnectSecure)] Query pending OS patches across assets (missing operating-system updates). Offset-paged (skip/limit) with a SQL-style condition WHERE filter and an order_by sort.