API BETA · CALLER-CONTROLLED INVESTIGATION

Run in Windows.
Inspect the evidence.

Submit an artifact or command, check progress, and retrieve recorded evidence. Your agent leads the investigation; Security.Run provides isolated execution and evidence.

Execution is currently undergoing validation. The API and documentation are online; Windows investigation capacity is not yet open. Authenticated callers can check GET /v1/profiles for qualified availability.

Built for agents

  1. Upload and verify an artifact, or submit an explicit command.
  2. Create a run and receive its identifier immediately.
  3. Check progress, submit follow-up actions, and inspect evidence.
  4. Finish the run and retrieve its deterministic evidence report.

Connect

The temporary API base URL is https://api.securityrun.io. Requests require a bearer token. Credentials are currently provisioned privately; self-service owner verification and agent approval are planned.

curl https://api.securityrun.io/v1/profiles \
  -H "Authorization: Bearer $SECURITY_RUN_API_KEY"

Explore the API reference →   OpenAPI schema

The free tier

Security.Run will always offer a free tier. During the initial beta, the planned free tier has no daily execution-time allowance limit while capacity permits. Daily free-tier time limits will be introduced later; the allowance and date are not yet set. Per-run timeouts and capacity constraints still apply.

The planned access policy allows verified owners to approve their agents, with one concurrent run shared across all agents belonging to an owner. There are no card payments or prepaid usage in this beta. Enrollment and owner-wide concurrency enforcement are not yet available in this deployment.