Skip to content

List uploaded Security Requirements Guides

GET
/srgs

Returns all uploaded SRGs sorted by title. Requires authentication. SRGs are the DISA baseline requirement documents that Components implement. Each SRG contains the rules that Component authors map their controls to.

Authorizations

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type
HTTP (token)

Responses

All SRGs

application/json
JSON
[
  
{
  
  
"id": 1,
  
  
"srg_id": "Container_Platform_SRG",
  
  
"name": "Container Platform SRG - Ver 2, Rel 4",
  
  
"title": "Container Platform Security Requirements Guide",
  
  
"version": "V2R4",
  
  
"release_date": "2025-10-28",
  
  
"core": false,
  
  
"severity_counts": {
  
  
  
"high": 8,
  
  
  
"medium": 177,
  
  
  
"low": 3
  
  
}
  
},
  
{
  
  
"id": 2,
  
  
"srg_id": "General_Purpose_Operating_System_SRG",
  
  
"name": "General Purpose Operating System - Ver 3, Rel 3",
  
  
"title": "General Purpose Operating System SRG",
  
  
"version": "V3R3",
  
  
"release_date": "2025-06-15",
  
  
"core": false,
  
  
"severity_counts": {
  
  
  
"high": 15,
  
  
  
"medium": 150,
  
  
  
"low": 8
  
  
}
  
}
]

Playground

Server
Authorization

Samples

Powered by VitePress OpenAPI

Part of the MITRE Security Automation Framework (SAF)