DevGuard Compliance Postures API

A compliance posture is your standing position on a single framework control: whether it is met, how, and what evidence supports that. This API lists postures for a scope, reads the posture for one control, and records posture events that move it forward.

Posture history is event-based. Rather than overwriting the current state, you append an event, which keeps an auditable trail of how a control reached its present position and who moved it there.

Two endpoints stand out. stats returns the aggregate counts you would put on a dashboard. oscal exports the whole posture as an OSCAL system security plan, which is the format auditors and other GRC tooling expect.

Every operation is available at organization, project, and asset-version scope, so a control can be answered once centrally or per product where the answer genuinely differs.

Have feedback? We want to hear from you!

Fields marked with * are required