eMASS Client

eMASS

The Defense Information Systems Agency (DISA) provides the Enterprise Mission Assurance Support Service (eMASS) application for managing cybersecurity data for US Department of Defense information systems. eMASS provides an Application Programming Interface (API) to allow users to request and post data to their eMASS instance quickly, easily, and repeatably.

The eMASS Client

eMASS instances expose an Application Programming Interface (API) to allow external tools and processes -- such as a security automation pipeline -- to interact with eMASS. This allows for use cases such as automatically updating a system's cybersecurity package in eMASS using scan artifacts generated by a scanning tool, or periodically pulling reports on a system's cybersecurity posture from eMASS.

MITRE SAF© created the eMASS client library to implement the eMASS API in user-friendly code packages. The eMASS client is released both as a Gem in the Ruby scripting language and as an NPM package. The client can be used both on its own or incorporated into a third-party application.

MITRE SAF© releases eMASSer as a standalone tool that implements the eMASS client library. The client is also built into the SAF CLI.

Associated Content

• eMASS client documentation
•  eMASS API specification documentation
• Interactive eMASS API tester