---
title: "Start a target validation"
method: POST
path: "/validations"
tags: ["Validations", "Beta"]
---

# Start a target validation

`POST /validations`

## Request

- Base URL: `https://public.escape.tech/v3`
- URL: `https://public.escape.tech/v3/validations`
- Auth: API key in header `X-ESCAPE-API-KEY`

Validates that a target (asset) is reachable and in scope without running a full scan. The asset type determines the validation workflow (DNS, IP, range, REST, GraphQL, webapp). Poll `GET /validations/{id}` until `status` is FINISHED, FAILED, or CANCELED.

## Request body

- object
  - `asset` union, required: The asset to validate
    - object
      - `asset_class` 'HOST', required
      - `extra_metadata` object, nullable
      - `screenshot_s3_key` string, nullable
      - `parents` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `childrens` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `asset_type` 'DNS', required
      - `address` string, required
      - `favicon` string, nullable
      - `open_ports` object[], nullable
        - `port` number, required
        - `protocols` string[], required
        - `location_ids` string[], nullable
      - `ports_insights` number[], nullable
      - `paths_insights` object[], nullable
        - `path` string, required
        - `method` 'CONNECT' | 'DELETE' | 'GET' | 'HEAD' | 'OPTIONS' | 'PATCH' | 'POST' | 'PUT' | 'TRACE', required
        - `parameters` object, nullable
          - `parameters` object[], nullable
            - `name` string, required
            - `in` 'path' | 'query' | 'header' | 'cookie', required
            - `required` boolean, nullable
            - `deprecated` boolean, nullable
            - `description` string, nullable
            - `style` string, nullable
            - `explode` boolean, nullable
            - `allowedReserved` boolean, nullable
            - `schema` object, nullable
            - `example` union
              - …
            - `examples` object, nullable
            - `content` object, nullable
          - `requestBody` object, nullable
            - `required` boolean, nullable
            - `description` string, nullable
            - `content` object, nullable
        - `returnType` object, nullable
          - `responses` object, nullable
      - `private` boolean, nullable
      - `third_party` 'ADMINER' | 'BACULA' | 'BAREOS' | 'CONFLUENCE' | 'DOVECOT' | 'DRONE' | 'ELK_STACK' | 'FREEAPI' | 'GHOST' | 'GITEA' | 'GITHUB' | 'GITLAB' | 'GLUU_SERVER' | 'GRAFANA' | 'JENKINS' | 'JIRA' | 'KEYCLOAK' | 'LEMONLDAP' | 'MAILCOW' | 'MATTERMOST' | 'METABASE' | 'MONGODB' | 'MYSQL' | 'NEXTCLOUD' | 'OPENVPN' | 'OWNCLOUD' | 'PHP' | 'PORTAINER' | 'POSTFIX' | 'POSTGRESQL' | 'PROMETHEUS' | 'RANCHER' | 'REDMINE' | 'RESTIC' | 'ROCKET_CHAT' | 'SEAFILE' | 'SENTRY' | 'SONAR' | 'TAIGA' | 'TEAMCITY' | 'VAULT' | 'WIREGUARD' | 'WORDPRESS' | 'ZULIP' | 'SPLUNK' | 'AIRFLOW' | 'APIGEE' | 'null', nullable
      - `dns_records` object[], nullable
        - `name` string, required
        - `type` string, required
        - `ttl` number, required
        - `data` string, required
        - `found_using_private_location` boolean, nullable
      - `ips` string[], nullable
      - `region_country_codes` string[], nullable
      - `registrar` string, nullable
    - object
      - `asset_class` 'HOST', required
      - `extra_metadata` object, nullable
      - `screenshot_s3_key` string, nullable
      - `parents` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `childrens` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `asset_type` 'IPV4', required
      - `address` string, required
      - `favicon` string, nullable
      - `open_ports` object[], nullable
        - `port` number, required
        - `protocols` string[], required
        - `location_ids` string[], nullable
      - `ports_insights` number[], nullable
      - `paths_insights` object[], nullable
        - `path` string, required
        - `method` 'CONNECT' | 'DELETE' | 'GET' | 'HEAD' | 'OPTIONS' | 'PATCH' | 'POST' | 'PUT' | 'TRACE', required
        - `parameters` object, nullable
          - `parameters` object[], nullable
            - `name` string, required
            - `in` 'path' | 'query' | 'header' | 'cookie', required
            - `required` boolean, nullable
            - `deprecated` boolean, nullable
            - `description` string, nullable
            - `style` string, nullable
            - `explode` boolean, nullable
            - `allowedReserved` boolean, nullable
            - `schema` object, nullable
            - `example` union
              - …
            - `examples` object, nullable
            - `content` object, nullable
          - `requestBody` object, nullable
            - `required` boolean, nullable
            - `description` string, nullable
            - `content` object, nullable
        - `returnType` object, nullable
          - `responses` object, nullable
      - `private` boolean, nullable
      - `third_party` 'ADMINER' | 'BACULA' | 'BAREOS' | 'CONFLUENCE' | 'DOVECOT' | 'DRONE' | 'ELK_STACK' | 'FREEAPI' | 'GHOST' | 'GITEA' | 'GITHUB' | 'GITLAB' | 'GLUU_SERVER' | 'GRAFANA' | 'JENKINS' | 'JIRA' | 'KEYCLOAK' | 'LEMONLDAP' | 'MAILCOW' | 'MATTERMOST' | 'METABASE' | 'MONGODB' | 'MYSQL' | 'NEXTCLOUD' | 'OPENVPN' | 'OWNCLOUD' | 'PHP' | 'PORTAINER' | 'POSTFIX' | 'POSTGRESQL' | 'PROMETHEUS' | 'RANCHER' | 'REDMINE' | 'RESTIC' | 'ROCKET_CHAT' | 'SEAFILE' | 'SENTRY' | 'SONAR' | 'TAIGA' | 'TEAMCITY' | 'VAULT' | 'WIREGUARD' | 'WORDPRESS' | 'ZULIP' | 'SPLUNK' | 'AIRFLOW' | 'APIGEE' | 'null', nullable
      - `organization` string, nullable
      - `country` string, nullable
    - object
      - `asset_class` 'HOST', required
      - `extra_metadata` object, nullable
      - `screenshot_s3_key` string, nullable
      - `parents` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `childrens` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `asset_type` 'IPV6', required
      - `address` string, required
      - `favicon` string, nullable
      - `open_ports` object[], nullable
        - `port` number, required
        - `protocols` string[], required
        - `location_ids` string[], nullable
      - `ports_insights` number[], nullable
      - `paths_insights` object[], nullable
        - `path` string, required
        - `method` 'CONNECT' | 'DELETE' | 'GET' | 'HEAD' | 'OPTIONS' | 'PATCH' | 'POST' | 'PUT' | 'TRACE', required
        - `parameters` object, nullable
          - `parameters` object[], nullable
            - `name` string, required
            - `in` 'path' | 'query' | 'header' | 'cookie', required
            - `required` boolean, nullable
            - `deprecated` boolean, nullable
            - `description` string, nullable
            - `style` string, nullable
            - `explode` boolean, nullable
            - `allowedReserved` boolean, nullable
            - `schema` object, nullable
            - `example` union
              - …
            - `examples` object, nullable
            - `content` object, nullable
          - `requestBody` object, nullable
            - `required` boolean, nullable
            - `description` string, nullable
            - `content` object, nullable
        - `returnType` object, nullable
          - `responses` object, nullable
      - `private` boolean, nullable
      - `third_party` 'ADMINER' | 'BACULA' | 'BAREOS' | 'CONFLUENCE' | 'DOVECOT' | 'DRONE' | 'ELK_STACK' | 'FREEAPI' | 'GHOST' | 'GITEA' | 'GITHUB' | 'GITLAB' | 'GLUU_SERVER' | 'GRAFANA' | 'JENKINS' | 'JIRA' | 'KEYCLOAK' | 'LEMONLDAP' | 'MAILCOW' | 'MATTERMOST' | 'METABASE' | 'MONGODB' | 'MYSQL' | 'NEXTCLOUD' | 'OPENVPN' | 'OWNCLOUD' | 'PHP' | 'PORTAINER' | 'POSTFIX' | 'POSTGRESQL' | 'PROMETHEUS' | 'RANCHER' | 'REDMINE' | 'RESTIC' | 'ROCKET_CHAT' | 'SEAFILE' | 'SENTRY' | 'SONAR' | 'TAIGA' | 'TEAMCITY' | 'VAULT' | 'WIREGUARD' | 'WORDPRESS' | 'ZULIP' | 'SPLUNK' | 'AIRFLOW' | 'APIGEE' | 'null', nullable
      - `organization` string, nullable
      - `country` string, nullable
    - object
      - `asset_class` 'NETWORK', required
      - `extra_metadata` object, nullable
      - `screenshot_s3_key` string, nullable
      - `parents` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `childrens` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `asset_type` 'IPV4_RANGE', required
      - `cidr` string, required
      - `private` boolean, nullable
      - `private_location_id` string, nullable
    - object
      - `asset_class` 'API_SERVICE', required
      - `extra_metadata` object, nullable
      - `screenshot_s3_key` string, nullable
      - `parents` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `childrens` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `url` string, required
      - `reachable_via` string[], nullable
      - `reachable_via_external_proxy` boolean, nullable
      - `asset_type` 'REST', required
      - `favicon` string, nullable
      - `private` boolean, nullable
      - `private_location_id` string, nullable
      - `environment` 'DEVELOPMENT' | 'STAGING' | 'PRODUCTION' | 'null', nullable
      - `cloud_provider` 'AKAMAI' | 'ALIBABA' | 'AWS' | 'AZURE' | 'CLOUDFLARE' | 'DIGITALOCEAN' | 'FASTLY' | 'GCP' | 'GRAVITEE' | 'HEROKU' | 'IBM' | 'LINODE' | 'ORACLE' | 'OVH' | 'SCALEWAY' | 'TENCENT' | 'UCLOUD' | 'VERCEL' | 'UNKNOWN' | 'null', nullable
      - `waf_provider` 'AESECURE' | 'AIREECDN' | 'AIRLOCK' | 'ALERT_LOGIC' | 'ALIYUNDUN' | 'ANQUANBAO' | 'ANYU' | 'APPROACH' | 'ARMOR_DEFENSE' | 'ARVANCLOUD' | 'ASPA_FIREWALL' | 'ASP_NET_GENERIC' | 'ASTRA' | 'AWS_ELASTIC_LOAD_BALANCER' | 'AZIONCDN' | 'YUNJIASU' | 'BARIKODE' | 'BARRACUDA' | 'BEKCHY' | 'BELUGA_CDN' | 'BINARYSEC' | 'BITNINJA' | 'BLOCKDOS' | 'BLUEDON' | 'BULLETPROOF_SECURITY_PRO' | 'CACHEFLY_CDN' | 'CACHEWALL' | 'CDNNS_APPLICATION_GATEWAY' | 'WP_CERBER_SECURITY' | 'CHINACACHE_LOAD_BALANCER' | 'CHUANG_YU_SHIELD' | 'ACE_XML_GATEWAY' | 'CLOUDBRIC' | 'CLOUDFLARE' | 'CLOUDFLOOR' | 'CLOUDFRONT' | 'COMODO_CWATCH' | 'CRAWLPROTECT' | 'DENYALL' | 'DISTIL' | 'DOSARREST' | 'DOTDEFENDER' | 'DYNAMICWEB_INJECTION_CHECK' | 'EDGECAST' | 'EISOO_CLOUD_FIREWALL' | 'EXPRESSION_ENGINE' | 'FIREPASS' | 'TRAFFICSHIELD' | 'FASTLY' | 'FORTIWEB' | 'AZURE_FRONT_DOOR' | 'GODADDY_WEBSITE_PROTECTION' | 'GREYWIZARD' | 'HUAWEI_CLOUD_FIREWALL' | 'HYPERGUARD' | 'DATAPOWER' | 'IMUNIFY360' | 'INCAPSULA' | 'INDUSGUARD' | 'INSTART_DX' | 'ISA_SERVER' | 'JANUSEC_APPLICATION_GATEWAY' | 'JIASULE' | 'KEYCDN' | 'KS_WAF' | 'KONA_SITEDEFENDER' | 'LIMELIGHT_CDN' | 'LITESPEED' | 'MALCARE' | 'MAXCDN' | 'MISSION_CONTROL_SHIELD' | 'MODSECURITY' | 'DATADOME' | 'NAXSI' | 'NEMESIDA' | 'NETCONTINUUM' | 'NETSCALER_APPFIREWALL' | 'NEVISPROXY' | 'NEWDEFEND' | 'NEXUSGUARD_FIREWALL' | 'NINJAFIREWALL' | 'NSFOCUS' | 'NULLDDOS_PROTECTION' | 'ONMESSAGE_SHIELD' | 'OPEN_RESTY_LUA_NGINX' | 'ORACLE_CLOUD' | 'PALO_ALTO_NEXT_GEN_FIREWALL' | 'PENTAWAF' | 'PERIMETERX' | 'PKSECURITY_IDS' | 'POWERCDN' | 'PROFENSE' | 'PT_APPLICATION_FIREWALL' | 'PUHUI' | 'QCLOUD' | 'QINIU' | 'APPWALL' | 'REBLAZE' | 'RSFIREWALL' | 'ASP_NET_WAF' | 'SABRE_FIREWALL' | 'SAFE3_WEB_FIREWALL' | 'SAFEDOG' | 'SAFELINE' | 'SECKING' | 'SECUPRESS_WP_SECURITY' | 'SECURE_ENTRY' | 'EEYE_SECUREIIS' | 'SECURESPHERE' | 'SENGINX' | 'SERVERDEFENDER_VP' | 'SHADOW_DAEMON' | 'SHIELD_SECURITY' | 'SITEGROUND' | 'SITEGUARD' | 'SITELOCK' | 'SONICWALL' | 'UTM_WEB_PROTECTION' | 'SQUARESPACE' | 'SQUIDPROXY_IDS' | 'STACKPATH' | 'SUCURI_CLOUDPROXY' | 'TENCENT_CLOUD_FIREWALL' | 'TEROS' | 'TRANSIP_WEB_FIREWALL' | 'UEWAF' | 'URLMASTER_SECURITYCHECK' | 'URLSCAN' | 'VARNISH' | 'VIETTEL' | 'VIRUSDIE' | 'WALLARM' | 'WATCHGUARD' | 'WEBARX' | 'WEBKNIGHT' | 'WEBLAND' | 'RAYWAF' | 'WEBSEAL' | 'WEBTOTEM' | 'WEST263_CDN' | 'WORDFENCE' | 'WPMUDEV_WAF' | 'WTS_WAF' | 'XLABS_SECURITY_WAF' | 'XUANWUDUN' | 'YUNDUN' | 'YUNSUO' | 'YXLINK' | 'ZENEDGE' | 'ZSCALER' | 'GOOGLE_CLOUD_APP_ARMOR' | 'UNKNOWN' | 'null', nullable
      - `auth_protocol` 'BASIC' | 'API_KEY' | 'DIGEST' | 'OAUTH' | 'MTLS' | 'SAML' | 'LDAP' | 'OIDC' | 'HMAC' | 'UNKNOWN' | 'null', nullable
      - `auth_technology` 'AUTH0' | 'COGNITO' | 'KEYCLOAK' | 'AWS_IAM' | 'AZURE_ACTIVE_DIRECTORY' | 'UNKNOWN' | 'null', nullable
      - `third_party` 'ADMINER' | 'BACULA' | 'BAREOS' | 'CONFLUENCE' | 'DOVECOT' | 'DRONE' | 'ELK_STACK' | 'FREEAPI' | 'GHOST' | 'GITEA' | 'GITHUB' | 'GITLAB' | 'GLUU_SERVER' | 'GRAFANA' | 'JENKINS' | 'JIRA' | 'KEYCLOAK' | 'LEMONLDAP' | 'MAILCOW' | 'MATTERMOST' | 'METABASE' | 'MONGODB' | 'MYSQL' | 'NEXTCLOUD' | 'OPENVPN' | 'OWNCLOUD' | 'PHP' | 'PORTAINER' | 'POSTFIX' | 'POSTGRESQL' | 'PROMETHEUS' | 'RANCHER' | 'REDMINE' | 'RESTIC' | 'ROCKET_CHAT' | 'SEAFILE' | 'SENTRY' | 'SONAR' | 'TAIGA' | 'TEAMCITY' | 'VAULT' | 'WIREGUARD' | 'WORDPRESS' | 'ZULIP' | 'SPLUNK' | 'AIRFLOW' | 'APIGEE' | 'null', nullable
      - `ips` string[], nullable
      - `region_country_codes` string[], nullable
      - `framework` 'REST_DJANGO' | 'REST_FLASK' | 'REST_FASTAPI' | 'REST_EXPRESS_JS' | 'REST_SPRING_BOOT' | 'REST_RUBY_ON_RAILS' | 'REST_ASP_NET' | 'REST_LARAVEL' | 'REST_NESTJS' | 'REST_SCALA_PLAY' | 'REST_CLOJURE' | 'REST_SYMFONY' | 'REST_GIN' | 'REST_HONO' | 'REST_NEXTJS' | 'REST_NUXTJS' | 'null', nullable
      - `endpoints` object[], nullable
        - `path` string, required
        - `method` 'CONNECT' | 'DELETE' | 'GET' | 'HEAD' | 'OPTIONS' | 'PATCH' | 'POST' | 'PUT' | 'TRACE', required
        - `parameters` object, nullable
          - `parameters` object[], nullable
            - `name` string, required
            - `in` 'path' | 'query' | 'header' | 'cookie', required
            - `required` boolean, nullable
            - `deprecated` boolean, nullable
            - `description` string, nullable
            - `style` string, nullable
            - `explode` boolean, nullable
            - `allowedReserved` boolean, nullable
            - `schema` object, nullable
            - `example` union
              - …
            - `examples` object, nullable
            - `content` object, nullable
          - `requestBody` object, nullable
            - `required` boolean, nullable
            - `description` string, nullable
            - `content` object, nullable
        - `returnType` object, nullable
          - `responses` object, nullable
      - `openapi_url` string, nullable
    - object
      - `asset_class` 'API_SERVICE', required
      - `extra_metadata` object, nullable
      - `screenshot_s3_key` string, nullable
      - `parents` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `childrens` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `url` string, required
      - `reachable_via` string[], nullable
      - `reachable_via_external_proxy` boolean, nullable
      - `asset_type` 'GRAPHQL', required
      - `favicon` string, nullable
      - `private` boolean, nullable
      - `private_location_id` string, nullable
      - `environment` 'DEVELOPMENT' | 'STAGING' | 'PRODUCTION' | 'null', nullable
      - `cloud_provider` 'AKAMAI' | 'ALIBABA' | 'AWS' | 'AZURE' | 'CLOUDFLARE' | 'DIGITALOCEAN' | 'FASTLY' | 'GCP' | 'GRAVITEE' | 'HEROKU' | 'IBM' | 'LINODE' | 'ORACLE' | 'OVH' | 'SCALEWAY' | 'TENCENT' | 'UCLOUD' | 'VERCEL' | 'UNKNOWN' | 'null', nullable
      - `waf_provider` 'AESECURE' | 'AIREECDN' | 'AIRLOCK' | 'ALERT_LOGIC' | 'ALIYUNDUN' | 'ANQUANBAO' | 'ANYU' | 'APPROACH' | 'ARMOR_DEFENSE' | 'ARVANCLOUD' | 'ASPA_FIREWALL' | 'ASP_NET_GENERIC' | 'ASTRA' | 'AWS_ELASTIC_LOAD_BALANCER' | 'AZIONCDN' | 'YUNJIASU' | 'BARIKODE' | 'BARRACUDA' | 'BEKCHY' | 'BELUGA_CDN' | 'BINARYSEC' | 'BITNINJA' | 'BLOCKDOS' | 'BLUEDON' | 'BULLETPROOF_SECURITY_PRO' | 'CACHEFLY_CDN' | 'CACHEWALL' | 'CDNNS_APPLICATION_GATEWAY' | 'WP_CERBER_SECURITY' | 'CHINACACHE_LOAD_BALANCER' | 'CHUANG_YU_SHIELD' | 'ACE_XML_GATEWAY' | 'CLOUDBRIC' | 'CLOUDFLARE' | 'CLOUDFLOOR' | 'CLOUDFRONT' | 'COMODO_CWATCH' | 'CRAWLPROTECT' | 'DENYALL' | 'DISTIL' | 'DOSARREST' | 'DOTDEFENDER' | 'DYNAMICWEB_INJECTION_CHECK' | 'EDGECAST' | 'EISOO_CLOUD_FIREWALL' | 'EXPRESSION_ENGINE' | 'FIREPASS' | 'TRAFFICSHIELD' | 'FASTLY' | 'FORTIWEB' | 'AZURE_FRONT_DOOR' | 'GODADDY_WEBSITE_PROTECTION' | 'GREYWIZARD' | 'HUAWEI_CLOUD_FIREWALL' | 'HYPERGUARD' | 'DATAPOWER' | 'IMUNIFY360' | 'INCAPSULA' | 'INDUSGUARD' | 'INSTART_DX' | 'ISA_SERVER' | 'JANUSEC_APPLICATION_GATEWAY' | 'JIASULE' | 'KEYCDN' | 'KS_WAF' | 'KONA_SITEDEFENDER' | 'LIMELIGHT_CDN' | 'LITESPEED' | 'MALCARE' | 'MAXCDN' | 'MISSION_CONTROL_SHIELD' | 'MODSECURITY' | 'DATADOME' | 'NAXSI' | 'NEMESIDA' | 'NETCONTINUUM' | 'NETSCALER_APPFIREWALL' | 'NEVISPROXY' | 'NEWDEFEND' | 'NEXUSGUARD_FIREWALL' | 'NINJAFIREWALL' | 'NSFOCUS' | 'NULLDDOS_PROTECTION' | 'ONMESSAGE_SHIELD' | 'OPEN_RESTY_LUA_NGINX' | 'ORACLE_CLOUD' | 'PALO_ALTO_NEXT_GEN_FIREWALL' | 'PENTAWAF' | 'PERIMETERX' | 'PKSECURITY_IDS' | 'POWERCDN' | 'PROFENSE' | 'PT_APPLICATION_FIREWALL' | 'PUHUI' | 'QCLOUD' | 'QINIU' | 'APPWALL' | 'REBLAZE' | 'RSFIREWALL' | 'ASP_NET_WAF' | 'SABRE_FIREWALL' | 'SAFE3_WEB_FIREWALL' | 'SAFEDOG' | 'SAFELINE' | 'SECKING' | 'SECUPRESS_WP_SECURITY' | 'SECURE_ENTRY' | 'EEYE_SECUREIIS' | 'SECURESPHERE' | 'SENGINX' | 'SERVERDEFENDER_VP' | 'SHADOW_DAEMON' | 'SHIELD_SECURITY' | 'SITEGROUND' | 'SITEGUARD' | 'SITELOCK' | 'SONICWALL' | 'UTM_WEB_PROTECTION' | 'SQUARESPACE' | 'SQUIDPROXY_IDS' | 'STACKPATH' | 'SUCURI_CLOUDPROXY' | 'TENCENT_CLOUD_FIREWALL' | 'TEROS' | 'TRANSIP_WEB_FIREWALL' | 'UEWAF' | 'URLMASTER_SECURITYCHECK' | 'URLSCAN' | 'VARNISH' | 'VIETTEL' | 'VIRUSDIE' | 'WALLARM' | 'WATCHGUARD' | 'WEBARX' | 'WEBKNIGHT' | 'WEBLAND' | 'RAYWAF' | 'WEBSEAL' | 'WEBTOTEM' | 'WEST263_CDN' | 'WORDFENCE' | 'WPMUDEV_WAF' | 'WTS_WAF' | 'XLABS_SECURITY_WAF' | 'XUANWUDUN' | 'YUNDUN' | 'YUNSUO' | 'YXLINK' | 'ZENEDGE' | 'ZSCALER' | 'GOOGLE_CLOUD_APP_ARMOR' | 'UNKNOWN' | 'null', nullable
      - `auth_protocol` 'BASIC' | 'API_KEY' | 'DIGEST' | 'OAUTH' | 'MTLS' | 'SAML' | 'LDAP' | 'OIDC' | 'HMAC' | 'UNKNOWN' | 'null', nullable
      - `auth_technology` 'AUTH0' | 'COGNITO' | 'KEYCLOAK' | 'AWS_IAM' | 'AZURE_ACTIVE_DIRECTORY' | 'UNKNOWN' | 'null', nullable
      - `third_party` 'ADMINER' | 'BACULA' | 'BAREOS' | 'CONFLUENCE' | 'DOVECOT' | 'DRONE' | 'ELK_STACK' | 'FREEAPI' | 'GHOST' | 'GITEA' | 'GITHUB' | 'GITLAB' | 'GLUU_SERVER' | 'GRAFANA' | 'JENKINS' | 'JIRA' | 'KEYCLOAK' | 'LEMONLDAP' | 'MAILCOW' | 'MATTERMOST' | 'METABASE' | 'MONGODB' | 'MYSQL' | 'NEXTCLOUD' | 'OPENVPN' | 'OWNCLOUD' | 'PHP' | 'PORTAINER' | 'POSTFIX' | 'POSTGRESQL' | 'PROMETHEUS' | 'RANCHER' | 'REDMINE' | 'RESTIC' | 'ROCKET_CHAT' | 'SEAFILE' | 'SENTRY' | 'SONAR' | 'TAIGA' | 'TEAMCITY' | 'VAULT' | 'WIREGUARD' | 'WORDPRESS' | 'ZULIP' | 'SPLUNK' | 'AIRFLOW' | 'APIGEE' | 'null', nullable
      - `ips` string[], nullable
      - `region_country_codes` string[], nullable
      - `framework` 'GRAPHQL_APOLLO' | 'GRAPHQL_GRAPHQLYOGA' | 'null', nullable
      - `operations` object[], nullable
        - `name` string, required
        - `type` string, required
        - `parameters` object[], nullable
          - `name` string, required
          - `type` string, required
        - `returnType` string, nullable
    - object
      - `asset_class` 'FRONTEND', required
      - `extra_metadata` object, nullable
      - `screenshot_s3_key` string, nullable
      - `parents` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `childrens` object[], nullable
        - `asset_uri` string, required
        - `verb` 'FINDS' | 'DEFINES' | 'IS_SOURCE' | 'CONTAINS' | 'USES', required
      - `url` string, required
      - `reachable_via` string[], nullable
      - `reachable_via_external_proxy` boolean, nullable
      - `asset_type` 'WEBAPP', required
      - `favicon` string, nullable
      - `private` boolean, nullable
      - `private_location_id` string, nullable
      - `framework` 'FRONTEND_REACT' | 'FRONTEND_VUE' | 'FRONTEND_ANGULAR' | 'FRONTEND_SVELTE' | 'FRONTEND_JQUERY' | 'FRONTEND_JAVASCRIPT' | 'FRONTEND_DJANGO' | 'null', nullable
      - `environment` 'DEVELOPMENT' | 'STAGING' | 'PRODUCTION' | 'null', nullable
      - `cloud_provider` 'AKAMAI' | 'ALIBABA' | 'AWS' | 'AZURE' | 'CLOUDFLARE' | 'DIGITALOCEAN' | 'FASTLY' | 'GCP' | 'GRAVITEE' | 'HEROKU' | 'IBM' | 'LINODE' | 'ORACLE' | 'OVH' | 'SCALEWAY' | 'TENCENT' | 'UCLOUD' | 'VERCEL' | 'UNKNOWN' | 'null', nullable
      - `waf_provider` 'AESECURE' | 'AIREECDN' | 'AIRLOCK' | 'ALERT_LOGIC' | 'ALIYUNDUN' | 'ANQUANBAO' | 'ANYU' | 'APPROACH' | 'ARMOR_DEFENSE' | 'ARVANCLOUD' | 'ASPA_FIREWALL' | 'ASP_NET_GENERIC' | 'ASTRA' | 'AWS_ELASTIC_LOAD_BALANCER' | 'AZIONCDN' | 'YUNJIASU' | 'BARIKODE' | 'BARRACUDA' | 'BEKCHY' | 'BELUGA_CDN' | 'BINARYSEC' | 'BITNINJA' | 'BLOCKDOS' | 'BLUEDON' | 'BULLETPROOF_SECURITY_PRO' | 'CACHEFLY_CDN' | 'CACHEWALL' | 'CDNNS_APPLICATION_GATEWAY' | 'WP_CERBER_SECURITY' | 'CHINACACHE_LOAD_BALANCER' | 'CHUANG_YU_SHIELD' | 'ACE_XML_GATEWAY' | 'CLOUDBRIC' | 'CLOUDFLARE' | 'CLOUDFLOOR' | 'CLOUDFRONT' | 'COMODO_CWATCH' | 'CRAWLPROTECT' | 'DENYALL' | 'DISTIL' | 'DOSARREST' | 'DOTDEFENDER' | 'DYNAMICWEB_INJECTION_CHECK' | 'EDGECAST' | 'EISOO_CLOUD_FIREWALL' | 'EXPRESSION_ENGINE' | 'FIREPASS' | 'TRAFFICSHIELD' | 'FASTLY' | 'FORTIWEB' | 'AZURE_FRONT_DOOR' | 'GODADDY_WEBSITE_PROTECTION' | 'GREYWIZARD' | 'HUAWEI_CLOUD_FIREWALL' | 'HYPERGUARD' | 'DATAPOWER' | 'IMUNIFY360' | 'INCAPSULA' | 'INDUSGUARD' | 'INSTART_DX' | 'ISA_SERVER' | 'JANUSEC_APPLICATION_GATEWAY' | 'JIASULE' | 'KEYCDN' | 'KS_WAF' | 'KONA_SITEDEFENDER' | 'LIMELIGHT_CDN' | 'LITESPEED' | 'MALCARE' | 'MAXCDN' | 'MISSION_CONTROL_SHIELD' | 'MODSECURITY' | 'DATADOME' | 'NAXSI' | 'NEMESIDA' | 'NETCONTINUUM' | 'NETSCALER_APPFIREWALL' | 'NEVISPROXY' | 'NEWDEFEND' | 'NEXUSGUARD_FIREWALL' | 'NINJAFIREWALL' | 'NSFOCUS' | 'NULLDDOS_PROTECTION' | 'ONMESSAGE_SHIELD' | 'OPEN_RESTY_LUA_NGINX' | 'ORACLE_CLOUD' | 'PALO_ALTO_NEXT_GEN_FIREWALL' | 'PENTAWAF' | 'PERIMETERX' | 'PKSECURITY_IDS' | 'POWERCDN' | 'PROFENSE' | 'PT_APPLICATION_FIREWALL' | 'PUHUI' | 'QCLOUD' | 'QINIU' | 'APPWALL' | 'REBLAZE' | 'RSFIREWALL' | 'ASP_NET_WAF' | 'SABRE_FIREWALL' | 'SAFE3_WEB_FIREWALL' | 'SAFEDOG' | 'SAFELINE' | 'SECKING' | 'SECUPRESS_WP_SECURITY' | 'SECURE_ENTRY' | 'EEYE_SECUREIIS' | 'SECURESPHERE' | 'SENGINX' | 'SERVERDEFENDER_VP' | 'SHADOW_DAEMON' | 'SHIELD_SECURITY' | 'SITEGROUND' | 'SITEGUARD' | 'SITELOCK' | 'SONICWALL' | 'UTM_WEB_PROTECTION' | 'SQUARESPACE' | 'SQUIDPROXY_IDS' | 'STACKPATH' | 'SUCURI_CLOUDPROXY' | 'TENCENT_CLOUD_FIREWALL' | 'TEROS' | 'TRANSIP_WEB_FIREWALL' | 'UEWAF' | 'URLMASTER_SECURITYCHECK' | 'URLSCAN' | 'VARNISH' | 'VIETTEL' | 'VIRUSDIE' | 'WALLARM' | 'WATCHGUARD' | 'WEBARX' | 'WEBKNIGHT' | 'WEBLAND' | 'RAYWAF' | 'WEBSEAL' | 'WEBTOTEM' | 'WEST263_CDN' | 'WORDFENCE' | 'WPMUDEV_WAF' | 'WTS_WAF' | 'XLABS_SECURITY_WAF' | 'XUANWUDUN' | 'YUNDUN' | 'YUNSUO' | 'YXLINK' | 'ZENEDGE' | 'ZSCALER' | 'GOOGLE_CLOUD_APP_ARMOR' | 'UNKNOWN' | 'null', nullable
      - `captcha_provider` 'RECAPTCHA' | 'HCAPTCHA' | 'CLOUDFLARE_TURNSTILE' | 'GEETEST' | 'FRIENDLY_CAPTCHA' | 'AWS_WAF_CAPTCHA' | 'MTCAPTCHA' | 'YANDEX_SMARTCAPTCHA' | 'ARCAPTCHA' | 'ALTCHA' | 'FUNCAPTCHA' | 'SLIDER_CAPTCHA' | 'PICATCHA' | 'SNAPHOST' | 'STARTEST' | 'ADCAPTCHA' | 'V4GUARD_CHECKPOINT' | 'COINHIVE_CAPTCHA' | 'RINGCAPTCHA' | 'REALLY_SIMPLE_CAPTCHA' | 'OTHER' | 'null', nullable
      - `auth_protocol` 'BASIC' | 'API_KEY' | 'DIGEST' | 'OAUTH' | 'MTLS' | 'SAML' | 'LDAP' | 'OIDC' | 'HMAC' | 'UNKNOWN' | 'null', nullable
      - `auth_technology` 'AUTH0' | 'COGNITO' | 'KEYCLOAK' | 'AWS_IAM' | 'AZURE_ACTIVE_DIRECTORY' | 'UNKNOWN' | 'null', nullable
      - `third_party` 'ADMINER' | 'BACULA' | 'BAREOS' | 'CONFLUENCE' | 'DOVECOT' | 'DRONE' | 'ELK_STACK' | 'FREEAPI' | 'GHOST' | 'GITEA' | 'GITHUB' | 'GITLAB' | 'GLUU_SERVER' | 'GRAFANA' | 'JENKINS' | 'JIRA' | 'KEYCLOAK' | 'LEMONLDAP' | 'MAILCOW' | 'MATTERMOST' | 'METABASE' | 'MONGODB' | 'MYSQL' | 'NEXTCLOUD' | 'OPENVPN' | 'OWNCLOUD' | 'PHP' | 'PORTAINER' | 'POSTFIX' | 'POSTGRESQL' | 'PROMETHEUS' | 'RANCHER' | 'REDMINE' | 'RESTIC' | 'ROCKET_CHAT' | 'SEAFILE' | 'SENTRY' | 'SONAR' | 'TAIGA' | 'TEAMCITY' | 'VAULT' | 'WIREGUARD' | 'WORDPRESS' | 'ZULIP' | 'SPLUNK' | 'AIRFLOW' | 'APIGEE' | 'null', nullable
      - `ips` string[], nullable
      - `region_country_codes` string[], nullable
      - `login_page` object, nullable
        - `login` 'none' | 'optional' | 'mandatory', required
        - `login_type` string[], required
        - `login_page_url` string, nullable
        - `can_register` boolean, required
        - `register_page_url` string, nullable
        - `sso_providers` string[], required
  - `proxyId` string, uuid, nullable: Force a specific Escape or private location for this validation
  - `defaultProxyType` 'ESCAPE' | 'PRIVATE': When `proxyId` is omitted, restrict to Escape-managed locations or private locations

## Response `200`

OK

- object
  - `id` string, uuid, required: Identifier for this validation; use it when polling for status
  - `status` 'CANCELED' | 'FAILED' | 'FINISHED' | 'RUNNING' | 'STARTING', required: Initial lifecycle state (typically STARTING right after creation)

## Other responses

- `400`: Bad Request

---

[API](https://skmtc.dev/escape/apis/escape-public-api.md) - [All operations](https://skmtc.dev/escape/apis/escape-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/escape/apis/escape-public-api/revisions/2eab35df40c7?raw)