Multi-tenant endpoints in API

There have been some hidden API options for multi-tenant users for a while, and since there is a growing number of multi-tenant users it was about time to properly document it.

If you have a multi-tenant subscription, there are groupadmins that can create, view and delete organizations in the GUI. These organizations are isolated and cannot see each others data. The groupadmin does have options to query and report over all organizations in the group.

Some of you want to dynamically manage organizations through the API. For that, there are three endpoints available:

create organization
active_organizations
delete_organization

You can of course also use this functionality in the ShadowTrackr Python API. There is a multi-tenant example included in the code on Github.

The groupcode and group API key needed to use this can be found in the GUI on the group settings page. This page is only accessible to groupadmins.

New API tag management endpoints

With the two new endpoints add_tags and remove_tags you can now manage asset tags through the API. For those of you that have thousands of assets this is much easier than the manual tagging available in the GUI.

The ShadowTrackr python module is updated too. More details about the endpoints are available in the API documentation.

Data and core infra moved to Germany

If things feel a little different when you access ShadowTrackr today, that might be cause the core infrastructure and data are in Germany now. This weekend the migration was completed. It was quite the operation, but I'll not go into it because it tends to get a bit boring to read about.

The point was to get the data in the EU. And not only have the data and servers moved, we also switched from an American to a German hosting company. We're following the calls to reduce dependencies outside the EU. That still means anyone from outside the EU is welcome to use ShadowTrackr of course.

The scanner nodes have not migrated yet. The are spread all over the world as we need them to be and still at the old hosting company. Most of them, perhaps all, will migrate too.