Digital Shadows

SearchLight Portal API

The Digital Shadows SearchLight Portal API — the REST surface behind the SearchLight / GreyMatter DRP portal. Exposes incidents, intelligence incidents, intelligence threats, data breaches and breach usernames, DNS and domain WHOIS lookups, IP WHOIS, exposed infrastructure (ports, SSL, vulnerabilities), IOC retrieval, and a cross-entity search endpoint. Authenticated with HTTP Basic using a portal-issued API key and secret; versioned through a vendor media type (application/vnd.polaris-vNN+json). The reference is published inside the authenticated portal under Portal > SearchLight API doc, so there is no public OpenAPI or reference page.

GitHub

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/digital-shadows/refs/heads/main/authentication/digital-shadows-authentication.yml

Other Resources

🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/digital-shadows/refs/heads/main/conventions/digital-shadows-conventions.yml
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/digital-shadows/refs/heads/main/errors/digital-shadows-problem-types.yml
🔗
DataModel
https://raw.githubusercontent.com/api-evangelist/digital-shadows/refs/heads/main/data-model/digital-shadows-data-model.yml
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/digital-shadows/refs/heads/main/apis.yml

API entry from apis.yml

apis.yml Raw ↑ 
name: SearchLight Portal API
description: The Digital Shadows SearchLight Portal API — the REST surface behind the SearchLight / GreyMatter
  DRP portal. Exposes incidents, intelligence incidents, intelligence threats, data breaches and breach
  usernames, DNS and domain WHOIS lookups, IP WHOIS, exposed infrastructure (ports, SSL, vulnerabilities),
  IOC retrieval, and a cross-entity search endpoint. Authenticated with HTTP Basic using a portal-issued
  API key and secret; versioned through a vendor media type (application/vnd.polaris-vNN+json). The reference
  is published inside the authenticated portal under Portal > SearchLight API doc, so there is no public
  OpenAPI or reference page.
humanURL: https://portal-digitalshadows.com/
baseURL: https://portal-digitalshadows.com/api/
tags:
- Threat Intelligence
- Digital Risk Protection
- Data Breach
- Incidents
properties:
- type: Authentication
  url: authentication/digital-shadows-authentication.yml
- type: Conventions
  url: conventions/digital-shadows-conventions.yml
- type: ErrorCatalog
  url: errors/digital-shadows-problem-types.yml
- type: DataModel
  url: data-model/digital-shadows-data-model.yml