API workflow

Manage Unified Application Security Policies programmatically through the Cortex Cloud public API.

Use the public API to automate policy management across tenants, integrate policy lifecycle operations directly into CI/CD pipelines, or synchronize policy configurations with infrastructure-as-code (IaC) workflows. For bulk operations, programmatic audits, or cross-tenant policy synchronization, the API is the ideal approach. The Cortex Cloud console remains the recommended interface for interactive policy creation and one-off configuration changes.

Note

The public API remains backward compatible with existing API consumers. The API returns additional fields for the unified policy structure, including the new policy type, trigger configuration, and Override Severity settings.

Authentication and base path

The public API base path is /public_api/appsec/v1/policies. All requests require one of the following authentication methods:

• The x-redlock-auth header with a valid JWT token
• The Authorization header with the API key

Supported operations

You can use the API to perform the following lifecycle actions on your security policies:

Operation	Method	Endpoint	Description
List policies	GET	/public_api/appsec/v1/policies	Retrieve all Unified Application Security Policies in your environment. This operation supports filtering by status, finding type, trigger, action, or custom/out-of-the-box classifications
Get policy by ID	GET	/public_api/appsec/v1/policies/{policyId}	Retrieve the full configuration, including conditions, triggers, scope, and metadata, for a specific policy using its unique identifier
Create policy	POST	/public_api/appsec/v1/policies	Programmatically build and enforce a new policy by defining its general details, condition filters, target scopes, and enforcement triggers across your pre-runtime lifecycle
Update policy	PUT	/public_api/appsec/v1/policies/{policyId}	Modify an existing policy's configuration, such as adjusting condition filters or toggling trigger actions
Delete policy	DELETE	/public_api/appsec/v1/policies/{policyId}	Remove a policy from your environment. Caution: All issues created by the deleted policy are closed during the next periodic scan

Duplicate a policy

To duplicate a policy programmatically:

1. Retrieve the source policy using the GET endpoint.
2. Modify the necessary details (such as the policy name).
3. Submit it as a new policy via the POST endpoint.

API reference

For the complete API reference, including request and response schemas, query parameter documentation, and error codes, see Policies