<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Performing Executive Security Reporting

## SIEM Reporting APIs

| Platform | Endpoint | Purpose |
|---|---|---|
| Splunk | `POST /services/search/jobs` | Run metrics queries |
| Splunk | `POST /services/search/jobs/export` | Export report data |
| Elastic | `POST /api/reporting/generate/csv` | Generate CSV report |
| Elastic | `POST /api/reporting/generate/printablePdf` | Generate PDF report |
| Sentinel | `POST /query` | Run KQL analytics queries |

## Dashboard and Visualization APIs

| Platform | Endpoint | Purpose |
|---|---|---|
| Grafana | `POST /api/dashboards/db` | Create executive dashboard |
| Grafana | `GET /render/d/{uid}` | Render dashboard as image |
| Power BI | `POST /v1.0/myorg/datasets/{id}/rows` | Push metrics data |
| Tableau | `POST /api/3.x/sites/{id}/views/{id}/data` | Extract view data |

## Compliance Framework APIs

| Platform | Endpoint | Purpose |
|---|---|---|
| Drata | `GET /public/controls` | Control compliance status |
| Vanta | `GET /v1/resources/controls` | Framework coverage |
| ServiceNow GRC | `GET /api/now/table/sn_compliance_policy` | Policy compliance |

## Vulnerability Management APIs

| Platform | Endpoint | Purpose |
|---|---|---|
| Tenable | `GET /workbenches/vulnerabilities` | Vulnerability summary |
| Qualys | `GET /api/2.0/fo/asset/host/vm/detection/` | Detection summary |
| Rapid7 | `GET /api/3/vulnerability_results` | Vulnerability results |

## Agent Script

```bash
# List report configuration
node agent.js config

# Calculate organizational risk score
node agent.js risk --incidents 35 --detection 72 --vulns 45 --compliance 85 --threats 60

# Generate report outline for audience
node agent.js outline --audience board
```
