Question 1

Does FortisEU have an API?

Accepted Answer

Yes. FortisEU provides a versioned REST API under /api/v1 covering compliance, assets, vendors, vulnerabilities, identity governance, webhooks, and more. The OpenAPI 3.0 spec is available at /openapi-v1.json.

Question 2

How do I authenticate with the FortisEU API?

Accepted Answer

Use an API key via Authorization: Bearer <api_key>. API keys are created in Settings → API Keys. Enterprise features include IP allowlisting, per-key rate limits, daily quotas, and HMAC request signing.

Question 3

What are the FortisEU API rate limits?

Accepted Answer

The V1 API tier allows 60 requests per minute per IP. Enterprise API keys can have custom rate limits up to 20,000 req/min and daily quotas up to 5,000,000. Response headers (X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset) are included on every response.

Question 4

Does FortisEU provide an OpenAPI spec?

Accepted Answer

Yes. A complete OpenAPI 3.0.3 specification is available at https://app.fortis.eu/openapi-v1.json. Import it into Postman, Insomnia, Swagger Editor, or use openapi-generator for client SDK generation.

Question 5

What SDKs does FortisEU provide?

Accepted Answer

FortisEU provides an OpenAPI 3.0 spec for generating client SDKs in any language. The API reference includes ready-to-use examples in cURL, TypeScript/Node.js, and Python.

FortisEU — REST API for EU compliance automation