Skip to main content
Version: 1.0

Posture Check Upload Initiation API

The Best Practice Assessment (BPA) Config Upload API provides a streamlined, programmatic way for organizations to audit their security posture. By integrating this API into your workflow, you can automatically submit configuration files from Palo Alto Networks Panorama or Next-Generation Firewalls (NGFW) and receive a comprehensive assessment based on industry-standard security benchmarks. The service parses your configuration, identifies potential security gaps, and returns a detailed JSON-formatted report. This allows your team to ingest data directly into custom dashboards, SIEMs, or other automations.

Key Features and Security

We understand that configuration files contain sensitive architectural data. This API is built with a security-first architecture to ensure your data remains protected:

  • Secure Transmission: All data is encrypted in transit using industry-standard TLS protocols.
  • Privacy Control (Zero Persistence): The API includes an optional flag that instructs the service to delete the configuration file immediately after the report is generated. This ensures that none of your sensitive information is stored in the cloud environment.
  • Actionable JSON Output: Instead of static PDFs, the API delivers structured data, making it machine readable and easily processed.

Workflow Overview

  1. Export: Generate a configuration file from your Panorama or NGFW.
  2. Upload: Submit the file to the config upload endpoint via a secure POST request.
  3. Process: The engine analyzes the configuration against hundreds of best-practice checks.
  4. Retrieve: Receive the results instantly in a structured JSON schema.
  5. Purge: (Optional) The service automatically deletes the source configuration file upon completion. This Open API spec file was created on March 18, 2026. © 2026 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark of Palo Alto Networks. A list of our trademarks can be found at https://www.paloaltonetworks.com/company/trademarks.html. All other marks mentioned herein may be trademarks of their respective companies.