Scanning API

We offer a very simple to use API that allows you to scan any site at any time and get a result similar to what is provided on our internal malware scanners and SiteCheck.

Our Scanning API is a paid plan for access to the API. Please contact sales@sucuri.net.

You can find this feature in your dashboard under “API” at the very bottom of the screen.

Scanning API

Once there, click on “Scanning API”.

Overview API

You can then click on the box next to “Enable Scanning API” in order to turn the feature on or off.

Enable API

Technical details

The API is very simple. Every request needs to be made to this URL:

https://[monitor domain]/scan-api.php?k=[your key]

Where [monitor domain] and [your key] can be found in your dashboard by clicking API at the bottom of your monitor dashboard.

*Note: the k (key) variable is your unique key and needs to be treated and secured like a password. Anyone with access to your key, will have full access to the API. In addition to the key variable, the API also requires an action that is specified by the “a” variable. For the scanning API the action is always “scan”.*

Scanning a site

To request a real time scan of a site, use the “scan” action in the API url followed by the “host” variable to specify the domain or URL to be scanned.

*Note that this request can take a little while to complete (up to a few minutes).*

Example:

https://monitorx.sucuri.net/scan-api.php?k=[yourkey]&a=scan&host=domain.com&format=simple
  • host (GET or POST): The site name to be scanned.
  • format (GET or POST): How you expect the results (not required – default to simple (greppable text))
    • Options:
      • text(print_r)
      • serialized
      • simple
Was this article helpful?