<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Implementing Vulnerability SLA Tracking

## SLA Matrix

| Severity × Tier | Tier 1 | Tier 2 | Tier 3 | Tier 4 |
|---|---|---|---|---|
| Critical | 1 day | 3 days | 7 days | 14 days |
| High | 3 days | 7 days | 14 days | 30 days |
| Medium | 14 days | 30 days | 60 days | 90 days |
| Low | 30 days | 60 days | 90 days | 180 days |

## Escalation Thresholds

| Days Overdue | Action | Target |
|---|---|---|
| 0 | Notify | Asset owner |
| +3 | Escalate | Team lead |
| +7 | Escalate | Director |
| +14 | Escalate | CISO |
| +30 | Risk acceptance | CISO + Risk committee |

## Metrics

| Metric | Definition |
|---|---|
| MTTR | Median days from discovery to remediation |
| SLA Adherence | % findings remediated within SLA |
| Overdue Rate | % open findings past SLA deadline |
| Aging | Distribution of open finding age in days |

## Agent Script

```bash
# Calculate SLA for single CVE
node agent.js calculate --cve CVE-2024-3400 --severity critical --tier 1 --discovered 2024-04-12

# Bulk SLA check
node agent.js bulk findings.json --tier 2

# MTTR report
node agent.js mttr closed_findings.json

# Check escalation action
node agent.js escalation --cve CVE-2024-3400 --days-overdue 10
```
