ASM Integrations

ASM integrations enable automatic discovery of APIs, services, and applications across cloud infrastructure and source code repositories. External attack surface data is continuously synchronized with Escape's ASM to provide comprehensive visibility into exposed assets.

Integration Categories¶

Cloud Infrastructure¶

Cloud provider integrations allow APIs and services deployed on major platforms to be discovered automatically:

• AWS - API Gateway endpoints and Lambda functions
• Azure - Azure API Management instances
• GCP - Cloud Endpoints and API Gateway resources
• Cloudflare - Workers and API routes
• Akamai - Edge configurations and API definitions
• Kubernetes - Services, Ingresses, and Istio resources

Source Code Repositories¶

Repository integrations enable API discovery from code by scanning for OpenAPI specifications, GraphQL schemas, and other API definition files:

• GitHub - Organization repositories and API schemas
• GitLab - Group and project repositories
• Bitbucket - Workspace repositories

API Documentation Platforms¶

• Postman - Collections and API definitions

Security Platforms¶

• Wiz - Network exposures and cloud resources with bi-directional vulnerability enrichment

How Discovery Works¶

1. Connection - Credentials are configured for the target platform
2. Enumeration - Resources are discovered through platform APIs
3. Classification - Discovered endpoints are classified as Assets in Escape's ASM
4. Continuous Sync - Changes are detected and synchronized automatically

Private Networks¶

For internal infrastructure not accessible from the public internet, a Private Location can be configured to enable secure connectivity between Escape and private resources.

Index¶