Skip to content

Introduction

What is the cyber.trackr.live OpenAPI Project?

This project provides tools and documentation for working with the cyber.trackr.live API, which offers programmatic access to DISA cybersecurity compliance data including STIGs, SRGs, and CCIs.

Project Components

What we provide:

  • OpenAPI Specification - Machine-readable description of all cyber.trackr.live API endpoints
  • Ruby Client - Production-ready gem with helper methods for common tasks
  • Documentation - Interactive interface to explore and test the API

Data available through the API: 1000+ STIGs, 300+ SRGs, 3000+ CCIs, RMF controls, and SCAP documents from cyber.trackr.live.

Technical Architecture

OpenAPI-First Architecture

  • Single source of truth: OpenAPI specification drives all generated artifacts
  • Version synchronization: Consistent versioning across clients and documentation
  • Standards compliance: OpenAPI 3.1.1 with comprehensive validation

Multi-Language Client Libraries

  • Ruby Client: Production-ready with comprehensive helper methods
  • Future Clients: TypeScript, Python, Go (community-driven)
  • Coordinated Releases: All clients share the same version from OpenAPI spec

Interactive Documentation

  • Try-it-out functionality: Test API calls directly from documentation
  • Static hosting support: Works on GitHub Pages through CORS proxy
  • Live examples: Real data from cyber.trackr.live API

Development Patterns

  • Two-tier testing: Separate spec validation from API behavior testing
  • Cross-platform compatibility: Works on Windows, macOS, Linux
  • Reusable approaches: Patterns that can be applied to other OpenAPI projects

API Data Access

The cyber.trackr.live API provides access to:

  • 1000+ DISA STIGs (Security Technical Implementation Guides)
  • 300+ SRGs (Security Requirements Guides)
  • 3000+ CCIs (Control Correlation Identifiers)
  • RMF Controls (Risk Management Framework)
  • 87 SCAP Documents (Security Content Automation Protocol)

No authentication required - start using immediately:

bash
curl https://cyber.trackr.live/api/stig

Getting Started

  1. Installation - Set up the Ruby client or development environment
  2. Quick Start - Make your first API calls and understand basic workflows
  3. Testing - Learn our two-tier testing approach and CI/CD patterns

Additional Resources

  • API Reference - Interactive documentation with try-it-out functionality
  • Development - Architecture patterns and development guides
  • Clients - Ruby client documentation and client generation
  • Patterns - Reusable patterns from this project

Project Features

For API Users

  • Ready-to-use Ruby client with error handling and helper methods
  • Interactive documentation for testing API endpoints
  • Examples for common cybersecurity compliance workflows

For Developers

  • OpenAPI-first patterns for consistent development
  • Cross-platform compatibility (Windows, macOS, Linux)
  • Two-tier testing architecture for maintainable code

For Organizations

  • Production-ready Ruby client with documentation
  • Patterns that can be adapted for other projects
  • Open source codebase with standard development practices

Community & Support

  • Documentation: Guides and examples throughout this site
  • Issues: GitHub Issues for bug reports and feature requests
  • Discussions: GitHub Discussions for questions and ideas
  • Collaboration: Project details about working with cyber.trackr.live

Ready to get started? Head to Installation to set up your development environment!

Released under the Apache-2.0 License.