Ctrlk
BlogSupport
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Standards

Operations for managing standards

Get compliance standards (v1)

post

Retrieve compliance standards with optional filtering, sorting and pagination.

  • The response is concatenated using AND condition (OR is not supported)

  • The maximum result set size is >100

  • Offset is the zero-based number of assessment profiles from the start of the result set

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations
x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body
Responses
200

Successfully retrieved standards

application/json
total_countintegerOptional

Total number of standards in the system

result_countintegerOptional

Number of standards matching the filter criteria + paging

post/public_api/v1/compliance/get_standards
POST /public_api/v1/compliance/get_standards HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 49

{
  "request_data": {
    "search_from": 0,
    "search_to": 49
  }
}
{
  "reply": {
    "total_count": 17,
    "result_count": 2,
    "standards": [
      {
        "id": "394fc8fc210645f6af8bb4267321482a",
        "name": "standard name",
        "description": "convert ...",
        "version": "",
        "assessments_profiles_count": 0,
        "controls_ids": [
          "0b0b5304d06d44ffb3d7465855378185",
          "98497e7bf21f413b9df0d84ccb8857d0"
        ],
        "labels": [
          "aws",
          "azure",
          "gcp"
        ],
        "revision": -6043636965775741000,
        "publisher": null,
        "release_date": "2025-06-18",
        "created_date": "2025-06-18",
        "created_by": "Palo Alto Networks",
        "insert_ts": 1750247438000,
        "modify_ts": 1750247439000,
        "is_custom": false
      },
      {
        "id": "36ed307155e446938f157e3ed214fd72",
        "name": "standard name ...",
        "description": "",
        "version": "",
        "assessments_profiles_count": 0,
        "controls_ids": [
          "0b0b5304d06d44ffb3d7465855378185",
          "98497e7bf21f413b9df0d84ccb8857d0"
        ],
        "labels": [
          "aws"
        ],
        "revision": 8279863739578999000,
        "publisher": null,
        "release_date": "2025-05-18",
        "created_date": "2025-05-18",
        "created_by": "Palo Alto Networks",
        "insert_ts": 1750247311000,
        "modify_ts": 1750247313000,
        "is_custom": false
      }
    ]
  }
}

Get single standard by ID (v1)

post

Retrieve details of the compliance standard specified by its ID.

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations
x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body
Responses
200

Successfully retrieved standard

application/json
post/public_api/v1/compliance/get_standard
POST /public_api/v1/compliance/get_standard HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 55

{
  "request_data": {
    "id": "eee175cb04da4a0e3091b1ee77368"
  }
}
{
  "standard": {
    "id": "36ed307155e446938f157e3ed214fd72",
    "name": "standard name ...",
    "description": "",
    "version": "",
    "assessments_profiles_count": 0,
    "controls_ids": [
      "0b0b5304d06d44ffb3d7465855378185",
      "98497e7bf21f413b9df0d84ccb8857d0"
    ],
    "labels": [
      "aws",
      "azure",
      "gcp"
    ],
    "revision": 8279863739578999000,
    "publisher": null,
    "release_date": "2025-06-18",
    "created_date": "2025-06-18",
    "created_by": "Palo Alto Networks",
    "insert_ts": 1750247411000,
    "modify_ts": 1750247413000,
    "is_custom": true
  }
}

Add new standard (v1)

post

Create a new compliance standard.

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations
x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body
Responses
200

Standard added successfully

application/json
successbooleanOptional

Operation success status

post/public_api/v1/compliance/add_standard
POST /public_api/v1/compliance/add_standard HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 163

{
  "standard_name": "Standard name",
  "description": "Standard description....",
  "labels": [
    "aws",
    "azure",
    "gcp",
    "oci"
  ],
  "controls_ids": [
    "48f2f6a9fde049479e9c8c8eda0be163"
  ]
}
{
  "reply": {
    "success": true
  }
}

Edit existing standard (v1)

post

Edit an existing compliance standard specified by its ID.

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations
x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body
Responses
200

Standard updated successfully

application/json
successbooleanOptional

Operation success status

post/public_api/v1/compliance/edit_standard
POST /public_api/v1/compliance/edit_standard HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 90

{
  "request_data": {
    "id": "48e2f6a9fdc049479e9c6a8eda0bd163",
    "standard_name": "test new name"
  }
}
{
  "reply": {
    "success": true
  }
}

Delete standard (v1)

post

Delete a the compliance standard specified by its ID.

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations
x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body
Responses
200

Standard deleted successfully

application/json
successbooleanOptional

Operation success status

post/public_api/v1/compliance/delete_standard
POST /public_api/v1/compliance/delete_standard HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 58

{
  "request_data": {
    "id": "f9f764717b284e9483f9c1210ed3149d"
  }
}
{
  "reply": {
    "success": true
  }
}
PreviousRules
NextModels

Last updated

Was this helpful?