Business plan
The Business customer API connects supported ScanTitan asset and scan workflows to your own systems, and signed completion webhooks tell those systems when a scan has finished. It automates ScanTitan itself. It is not the same as scanning a Web API asset, which is covered on the API vulnerability scanner page.
Business costs $155 per asset place per year, billed annually. Choose the Website asset type to start.
Choose BusinessHow it worksThe current API base is https://portal.scantitan.com/api/v2/business. The portal documentation lists the supported operations, and you should rely on it for exact routes and request formats.

Never paste real tokens or webhook secrets into tickets, chat or public code.
Automates ScanTitan from your tools: assets, scans, results and completion webhooks. Business plan.
Scans a Web API as an asset: it imports OpenAPI, Postman, GraphQL queries or SOAP and tests it. See the API vulnerability scanner.
The customer API is available with Business. Compare plans, scan websites from the website vulnerability scanner, or read how Consultant handles client reporting instead.
It is the Business API for automating ScanTitan workflows: supported assets and scans, results and coverage.
Business only. Consultant does not include customer API tokens.
No. The API vulnerability scanner assesses a Web API asset. The customer API automates ScanTitan itself.
No native connectors are released. You can build a custom workflow that uses completion webhooks.
Check the signature on each delivery using the method in the portal documentation before acting on it.
In the ScanTitan portal. The base is https://portal.scantitan.com/api/v2/business.
Yes. A signed completion webhook tells your system when a scan has finished.
Choose Business with the Website asset type, create a token and connect your first workflow.
Choose BusinessCompare plansThese ScanTitan features work alongside this one.