DEVELOPER API REFERENCE

AttackSurface REST API.

Automate target tracking, ingest verified scope rules, and pull temporal differentials directly into your security tooling and custom research scripts.

Base URL:https://api.attacksurface.online/api/v1

Available Endpoints

GET/api/v1/programs

Returns paginated list of synchronized bug bounty programs from HackerOne, Bugcrowd, and enterprise VDPs.

Query Parameters

Parameter	Type	Required	Description
limit	integer	No	Number of items to return (default 50, max 200)
offset	integer	No	Pagination offset
q	string	No	Search query across company and program names
bounty_only	boolean	No	Filter only monetary reward programs

Request Example

curl -X GET "https://api.attacksurface.online/api/v1/programs?limit=10&bounty_only=true"

Response Payload (200 OK)

{
  "total": 2010,
  "items": [
    {
      "id": 1,
      "company_id": 14,
      "platform": "HACKERONE",
      "name": "Acme Security Program",
      "program_url": "https://hackerone.com/acme",
      "bounty_enabled": true,
      "min_bounty": 250,
      "max_bounty": 10000,
      "scope_rules_count": 14
    }
  ]
}