Skip to content

Assets

Assets are hardware and software components within an environment. BreachSpider matches each asset against the CVE corpus to produce findings.

Asset Fields

Field Type Description
id integer Asset ID
name string Asset name (e.g. "SCADA Server 01")
vendor string Manufacturer name
product string Product name
version string Firmware or software version
ip_address string IP address (optional)
asset_type string PLC, HMI, RTU, SCADA, Workstation, Server, Firewall, Switch
layer string OT, IT, Network, Other
is_active boolean Whether this asset is currently active
match_count integer Number of CVE matches

Match Confidence

Confidence Meaning
high Vendor and product name both match - counts in posture scores
medium Vendor match only - shown but not counted in risk score
low Fuzzy match - informational only

Only high confidence matches count toward dashboard findings, risk scores, and alert triggers.

Listing Assets

curl -H "Authorization: Bearer bs_live_..." \
  "https://breachspider.com/api/v1/environments/5/assets?page=1&limit=50"

Updating an Asset

curl -X PUT \
  -H "Authorization: Bearer bs_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "version": "2.9.7",
    "is_active": true
  }' \
  "https://breachspider.com/api/v1/environments/5/assets/42"

CSV Template Format

The CSV template has these columns:

name,vendor,product,version,ip_address,asset_type,layer,notes
SCADA Server 01,Siemens,SIMATIC S7-1500,2.9.4,192.168.10.15,PLC,OT,
HMI Terminal 01,GE Vernova,CIMPLICITY,12.0,,HMI,OT,Control room