Coverage


GET /v1/coverage

Get the current user’s ATT&CK technique coverage data. This powers the coverage heatmap in the web UI.

Authentication

Requires Bearer token (JWT or API key).

Example Request


curl https://cloudsigma.a13e.com/v1/coverage \
  -H "Authorization: Bearer YOUR_API_KEY"

Response


{
  "success": true,
  "data": {
    "techniques": [
      {
        "techniqueId": "T1078.004",
        "count": 3,
        "providers": ["aws", "azure"],
        "lastGenerated": "2026-02-10T12:00:00Z"
      },
      {
        "techniqueId": "T1098.001",
        "count": 5,
        "providers": ["aws", "gcp", "azure"],
        "lastGenerated": "2026-02-14T09:15:00Z"
      }
    ]
  }
}

Response Fields

Field	Type	Description
`techniques`	array	ATT&CK techniques with coverage data
`techniques[].techniqueId`	string	MITRE ATT&CK technique ID
`techniques[].count`	integer	Number of rules generated for this technique
`techniques[].providers`	string[]	Platforms covered
`techniques[].lastGenerated`	string	ISO 8601 timestamp of most recent generation

Errors

HTTP	Code	Description
401	`Unauthorized`	Invalid or missing token