BuildonStrobeswithaCompleteAPI
Full REST API access, webhook support, and SDK tooling. Everything your team needs to extend Strobes AI into your security operations stack.
Strobes AI is built API-first. Every feature available in the platform is available through the API. Build custom integrations, automate complex workflows, and embed exposure data wherever your team works. Whether you're piping findings into a custom dashboard or triggering remediation from your CI/CD pipeline, the API gives you full programmatic control.
Securitytoolsareblackboxeswithnoextensibility.
Most security platforms treat their API as an afterthought: limited endpoints, poor documentation, and no SDK support. Teams that need custom integrations, automated workflows, or embedded security data are stuck with manual workarounds.
- Data trapped in silos: no programmatic way to extract findings, risk scores, or remediation metrics for custom reporting
- No event-driven architecture: teams resort to polling or manual checks instead of reacting to security events in real time
- Custom integrations are fragile, built on undocumented APIs that break with every platform update
- Developer experience is an afterthought: no SDKs, no code examples, no sandbox for testing
Security platforms should be platforms. Extensible, programmable, and developer-friendly.
Real code, real endpoints
Explore the Strobes API ecosystem: GraphQL platform access, vulnerability intelligence, automation pipelines, and custom scanner connectors.
Full platform access via GraphQL — query and mutate assets, findings, engagements, and assessments.
{host}/api/graphql//api/graphql/Query All Findings
Fetch paginated findings with cursor-based pagination, filtering by severity, state, and organization.
1from strobes_gql_client import StrobesGQLClient2 3client = StrobesGQLClient(4 host="app.strobes.co",5 api_token=os.environ["STROBES_API_TOKEN"]6)7 8# Query all critical open findings9result = client.execute_query(10 "allBugs",11 organizationId=org_id,12 searchQuery="severity:critical state:open",13 orderBy="-severity",14 page=1,15 pageSize=5016)17 18for bug in result["allBugs"]["objects"]:19 print(f"{bug['title']} — {bug['severity']}")Everything in the platform, available programmatically
GraphQL Platform API
Full platform access via GraphQL at /api/graphql/. Query and mutate assets, findings, engagements, and assessments. Cursor-based pagination, bulk operations (update, assign, tag, delete), and real-time data. Authenticated with scoped API tokens.
Intel REST API
Vulnerability intelligence API at intel.strobes.co with 390K+ CVEs. Public endpoints for CVE lookup, EPSS scores, CISA KEV data, and threat actor tracking. Licensed endpoints for bulk downloads and advanced filtering. No SDK required, just standard HTTP.
Automation Pipelines
Serverless Python functions that run inside Strobes. Implement run_pipeline(input) to process findings with full access to CVE intelligence, asset context, and prefetched data. Adjust severity, enrich descriptions, calculate custom risk scores, and enforce business logic.
Custom Connectors
Import findings from any scanner or tool via the Script Executor. Implement a run() function that returns normalized assets and vulnerabilities with deduplication keys. Supports 222 asset types across cloud (AWS, Azure, GCP), network, web, and code.
From API token to production integration in minutes
Generate API Token
Create a scoped API token from the Strobes dashboard. Set environment variables STROBES_API_TOKEN and STROBES_ORGANIZATION_ID. Token-based auth via Authorization header, or JWT login via /api/v1/login/.
Install the SDK
Clone strobes-gql-client from GitHub and install with pip. The SDK wraps GraphQL operations with sgqlc: typed queries, mutations, and cursor pagination out of the box. Or use raw HTTP with any language.
Query & Mutate
Use execute_query() for reads (allBugs, allAssets, allEngagements) and execute_mutation() for writes (bulkUpdate, bulkAssignment, addComment). The Intel REST API needs no SDK, just standard GET/POST with JSON.
Extend with Pipelines
Write Python pipeline functions that process every finding as it flows through Strobes. Access prefetched CVE data, CWE context, asset metadata, and EPSS scores. Return a dict of fields to update. Strobes handles the rest.
One API. Endless ways to extend it
Custom Dashboards
Official GitHub repositories
Clone, fork, and contribute. All client libraries, cookbooks, and pipeline examples are open source.
Official Python GraphQL client for the Strobes platform. Typed queries, mutations, cursor pagination, and JWT auth helpers built on sgqlc.
Ready-to-use scripts for asset validation, vulnerability CSV import, AWS cloud asset sync, CI/CD integration, and Custom Connector development.
Example automation pipeline functions — CVSS severity adjustment, CVE enrichment, exploit prioritization, SLA calculation, and CWE categorization.
“WeintegratedStrobesintoourCI/CDpipelineintwodaysusingtheGraphQLclient.ThePythonSDKhandlespaginationandauth,sowejustwritethelogic.OurnightlytriagescriptqueriesallBugs,enrichesfindingswithCMDBdata,andassignsownersautomatically.Whatusedtotakeourteam3hourseverymorningnowrunsin90seconds.”
Staff Security Engineer
Security Automation Lead · FinTech Platform
Frequently Asked Questions
Start building on the Strobes API
Get API access and build the integrations your security operations need. Custom dashboards, CI/CD gates, automated workflows, the full platform is at your fingertips.