You can now create and delete API keys from within the Hexiosec ASM app.  

To manage your API keys, click on the account icon and then 'account & preferences'.  On the API Keys tab you will be able to see the active keys, and delete if required, and also create a new API key with a specified lifetime.

Paginating the API Requests

Managing API Keys

EPSS

Hexiosec ASM mobile

Hexiosec ASM

Hexiosec ASM (Public)

Organisation and Group Roles

Using Scan Groups

MFA and session expiry

Password Policy

Changing email address

Changing ownership

User and Group Management

Scan Types

Scan Allowances

Seeds and IPs

Scan Limiting

Deleting Scans

Scan Notifications

Managing Scans

Report Terminology

Scan Reports

Health Scores

Managing Actions

EPSS Scoring of Risks

TLS Certificate Risks

Backport Resolvable Risks

Risk Severity Ratings

SPF Hard Fail risks

Managing Risks

Managing Domains and IPs

Graph view

Managing CDNs and Shared IPs

Cloud Asset Discovery

Link Changes Endpoint

Creating a scan using the API

Using the Public API

Upgrade Recommendations

Contacting Support

Hexiosec ASM User Guides

How do I amend my marketing preferences?

How long do we keep the scan changes data?

What is the 'Update pending' notification?

I've accepted an invite, why can't I see anything?

What version is Hexiosec ASM?

Which SSO protocols does ASM support?

Which domains need security.txt files?

Why is my IP's geographic location not showing, or incorrect?

What are primary and secondary assets?

What is a Stale domain?

Does ASM validate the DKIM public key?

Why do I have a risk against client-side React?

I don't think this vulnerability applies to me?

I've fixed a risk, why has it not been resolved?

Will Hexiosec ASM find Malware?

Will the latest CVE be found?

Can I run scans without permission?

Why are secondary assets included in my IP/domain count?

Frequently Asked Questions

MSP Specific Guidance