> **For AI agents:** The documentation index is at [https://docs.digitalocean.com/llms.txt](https://docs.digitalocean.com/llms.txt). Markdown versions of pages use the same URL with `index.html.md` in place of the HTML page (for example, append `index.html.md` to the directory path instead of opening the HTML document).

# CSPM Reference

Cloud Security Posture Management (CSPM) evaluates your DigitalOcean resources for misconfigurations and security risks, surfaces findings by severity, and provides guidance to help you resolve them.

## The DigitalOcean API

The [DigitalOcean API](https://docs.digitalocean.com/reference/index.html.md) lets you manage resources programmatically with standard HTTP requests. All actions available in the control panel are also available through the API.

You can use the API to [create CSPM scans](https://docs.digitalocean.com/reference/api/reference/security/index.html.md#security_create_scan), [list affected resources for findings](https://docs.digitalocean.com/reference/api/reference/security/index.html.md#security_list_scan_finding_affected_resources), and [update CSPM plan settings](https://docs.digitalocean.com/reference/api/reference/security/index.html.md#security_update_settings_plan).

## The DigitalOcean Command Line Client, doctl

[`doctl`](https://github.com/digitalocean/doctl) is the command-line interface for the DigitalOcean API. It supports most of the same actions available in the API and DigitalOcean Control Panel.

[`doctl`](https://github.com/digitalocean/doctl) supports managing CSPM scans from the command line. See the [`doctl` documentation](https://docs.digitalocean.com/reference/doctl/reference/security/index.html.md) or run `doctl security --help`.

[DigitalOcean Security API Reference](https://docs.digitalocean.com/reference/api/reference/security/index.html.md): Use the DigitalOcean API to list, create, and manage CSPM scans and security settings.

[doctl security](https://docs.digitalocean.com/reference/doctl/reference/security/index.html.md): Manage CSPM scans from the command line.