For the complete documentation index, see llms.txt. This page is also available as Markdown.

Assessment Profiles

Operations for managing assessment profiles

Get assessment profiles

post

An assessment profile uses a standard to run scans on an asset group to check whether the assets adhere to the standard.

Retrieve compliance assessment profiles with optional filtering, sorting and pagination.

  • The response is concatenated using AND condition (OR is not supported)

  • The maximum result set size is >100

  • Offset is the zero-based number of assessment profiles from the start of the result set

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations
x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body
Responses
200

Successfully retrieved assessment profiles

application/json
post/public_api/v1/compliance/get_assessment_profiles
POST /public_api/v1/compliance/get_assessment_profiles HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 210

{
  "request_data": {
    "search_from": 0,
    "search_to": 50,
    "sort": {
      "field": "report_type",
      "keyword": "desc"
    },
    "filters": [
      {
        "field": "creation_time",
        "operator": "gte",
        "value": 0
      },
      {
        "field": "name",
        "operator": "eq",
        "value": "John"
      }
    ]
  }
}
{
  "reply": {
    "total_count": 925,
    "result_count": 1,
    "assessment_profiles": [
      {
        "ID": "472141782aff4a2f999c5e3c35745b3a",
        "NAME": "Assessment example",
        "STANDARD_ID": "2nnd684-4z14-5cs82-c1a0-7c322b671844",
        "STANDARD_NAME": "CIS Amazon Linux 2 Benchmark v1.0.0",
        "ASSET_GROUP_ID": 1,
        "ASSET_GROUP_NAME": "asset group name",
        "DESCRIPTION": "assessment description",
        "REPORT_FREQUENCY": null,
        "REPORT_TARGETS": [],
        "REPORT_TYPE": "NONE",
        "ENABLED": true,
        "INSERT_TS": 1748259453615,
        "MODIFY_TS": 1748259453615,
        "CREATED_BY": "Generic Name",
        "MODIFIED_BY": "Generic Name"
      }
    ]
  }
}

Get assessment profile by ID

post

An assessment profile uses a standard to run scans on an asset group to check whether the assets adhere to the standard.

Get details of the assessment profile specified by its ID.

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations
x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body
Responses
200

Successfully retrieved assessment profile

application/json
idstringOptional

Assessment profile ID

namestringOptional

Assessment profile name

descriptionstringOptional

Description of the assessment profile

enabledbooleanOptional

Whether the assessment profile is enabled

standard_idstringOptional

Standard ID

standard_namestringOptional

Standard name

asset_group_idintegerOptional

Asset Group ID

asset_group_namestringOptional

Asset Group name

report_typestringOptional

Report type

report_targetsstring · email[]Optional
evaluation_frequencystringOptional
creation_timestring · date-timeOptional

Assessment profile creation time

modification_timestring · date-timeOptional

Assessment profile modification time

created_bystringOptional

Assessment profile creator

modified_bystringOptional

Assessment profile modified by

post/public_api/v1/compliance/get_assessment_profile
POST /public_api/v1/compliance/get_assessment_profile HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 58

{
  "request_data": {
    "id": "eee175cb00ef4da4a0e3091b1ee77368"
  }
}
{
  "id": "text",
  "name": "text",
  "description": "text",
  "enabled": true,
  "standard_id": "text",
  "standard_name": "text",
  "asset_group_id": 1,
  "asset_group_name": "text",
  "report_type": "text",
  "report_targets": [
    "name@gmail.com"
  ],
  "evaluation_frequency": "text",
  "creation_time": "2026-01-01T00:00:00.000Z",
  "modification_time": "2026-01-01T00:00:00.000Z",
  "created_by": "text",
  "modified_by": "text"
}

Add assessment profile

post

Create a custom compliance assessment profile that is tailored to your own business needs and organizational policies.

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations
x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body
Responses
200

Successfully created assessment profile

application/json
successbooleanOptional

Whether the assessment profile creation succeeded

post/public_api/v1/compliance/add_assessment_profile
POST /public_api/v1/compliance/add_assessment_profile HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 264

{
  "request_data": {
    "profile_name": "profile example",
    "description": "profile description example",
    "evaluation_frequency": "0 12 * * *",
    "asset_group_id": "3",
    "report_type": "ALL",
    "standard_id": "532ac684-451c-5c789-b1a8-7c325b678843",
    "report_targets": [
      "user@company.com"
    ]
  }
}
{
  "success": true
}

Edit assessment profile

post

Edit an existing compliance custom assessment profile.

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations
x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body
Responses
200

Successfully updated assessment profile

application/json
successbooleanOptional
post/public_api/v1/compliance/edit_assessment_profile
POST /public_api/v1/compliance/edit_assessment_profile HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 85

{
  "request_data": {
    "id": "48e2f6a9fdc049479e9c6a8eda0bd163",
    "control_name": "Control 1"
  }
}
{
  "success": true
}

Delete assessment profile

post

Delete an assessment profile specified by its ID.

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations
x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body
Responses
200

Successfully deleted assessment profile

application/json
successbooleanOptional

Whether the assessment profile deletion succeeded

post/public_api/v1/compliance/delete_assessment_profile
POST /public_api/v1/compliance/delete_assessment_profile HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 58

{
  "request_data": {
    "id": "f9f764717b284e9483f9c1210ed3149d"
  }
}
{
  "success": true
}

Last updated

Was this helpful?