Digital Shadows

aid: digital-shadows
name: Digital Shadows
description: Digital Shadows is a London-founded digital risk protection (DRP) company whose SearchLight platform monitors
  the open, deep and dark web for data leakage, exposed credentials, brand impersonation, exposed infrastructure and threat-actor
  activity affecting a customer's organization. ReliaQuest acquired Digital Shadows in July 2022 and the entity now trades
  as ReliaQuest UK Limited, with SearchLight folded into ReliaQuest GreyMatter Digital Risk Protection. The SearchLight Portal
  API remains live at portal-digitalshadows.com/api/ and is consumed by first-party tooling (the shadowline Python CLI and
  the Splunk SOAR connector) and by a wide third-party integration surface (Cortex XSOAR, ThreatConnect, Splunk, Sekoia, Axonius,
  TheHive, Atlassian Marketplace). The API reference itself is published only inside the authenticated customer portal.
url: https://raw.githubusercontent.com/api-evangelist/digital-shadows/refs/heads/main/apis.yml
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source:
  - authentication
  - security
  generated: '2026-09-03'
  method: derived
image: https://avatars.githubusercontent.com/u/11042971?v=4
x-type: company
x-source: harvest:secondary-market
x-tier: profiled
x-tier-reason: enrichment-pipeline
specificationVersion: '0.23'
created: '2026-08-12'
modified: '2026-08-12'
tags:
- Company
- Cybersecurity
- Threat Intelligence
- Digital Risk Protection
- Dark Web Monitoring
- Data Breach
- Brand Protection
- Security Operations
- Vulnerability Intelligence
apis:
- name: SearchLight Portal API
  description: The Digital Shadows SearchLight Portal API — the REST surface behind the SearchLight / GreyMatter DRP portal.
    Exposes incidents, intelligence incidents, intelligence threats, data breaches and breach usernames, DNS and domain WHOIS
    lookups, IP WHOIS, exposed infrastructure (ports, SSL, vulnerabilities), IOC retrieval, and a cross-entity search endpoint.
    Authenticated with HTTP Basic using a portal-issued API key and secret; versioned through a vendor media type (application/vnd.polaris-vNN+json).
    The reference is published inside the authenticated portal under Portal > SearchLight API doc, so there is no public OpenAPI
    or reference page.
  humanURL: https://portal-digitalshadows.com/
  baseURL: https://portal-digitalshadows.com/api/
  tags:
  - Threat Intelligence
  - Digital Risk Protection
  - Data Breach
  - Incidents
  properties:
  - type: Authentication
    url: authentication/digital-shadows-authentication.yml
  - type: Conventions
    url: conventions/digital-shadows-conventions.yml
  - type: ErrorCatalog
    url: errors/digital-shadows-problem-types.yml
  - type: DataModel
    url: data-model/digital-shadows-data-model.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/digital-shadows-domain-security.yml
- type: Website
  url: https://reliaquest.com/solutions/digital-risk-protection/
- type: Portal
  url: https://portal-digitalshadows.com/
- type: GitHubOrganization
  url: https://github.com/digitalshadows
- type: Blog
  url: https://reliaquest.com/blog/
- type: PrivacyPolicy
  url: https://reliaquest.com/privacy-policy/
- type: StatusPage
  url: https://status.digitalshadows.com/
- type: Lifecycle
  url: lifecycle/digital-shadows-lifecycle.yml
- type: Packages
  url: packages/digital-shadows-packages.yml
- type: SDKs
  url: packages/digital-shadows-packages.yml
- type: CLI
  url: cli/digital-shadows-cli.yml
- type: Authentication
  url: authentication/digital-shadows-authentication.yml
- type: Conventions
  url: conventions/digital-shadows-conventions.yml
- type: ErrorCatalog
  url: errors/digital-shadows-problem-types.yml
- type: DataModel
  url: data-model/digital-shadows-data-model.yml
- type: Conformance
  url: conformance/digital-shadows-conformance.yml
- type: LLMsTxt
  url: llms/digital-shadows-llms.txt
- type: Plans
  url: plans/digital-shadows-plans-pricing.yml
- type: RateLimits
  url: rate-limits/digital-shadows-rate-limits.yml
- type: SecondaryMarket
  url: https://forgeglobal.com/digital-shadows_stock/
x-enrichment:
  date: '2026-08-12'
  status: enriched
  artifacts_added: 13
  pass: local-v1
x-contract-discovery:
  checked: '2026-08-12'
  result: no-public-machine-readable-contract
  detail: STEP 0b run in full against every known host. No OpenAPI/Swagger at /openapi.json, /openapi.yaml, /swagger.json,
    /v1/openapi.json, /api-docs, /docs or /redoc on portal-digitalshadows.com (Angular SPA answers 200 with a 2,288-byte HTML
    shell for every path) or on the unattributed api.searchlight.app (401 JSON on every path). No GraphQL surface. No MCP
    server. No A2A agent card on either /.well-known/agent-card.json or the legacy /.well-known/agent.json — the portal's
    200s are SPA catch-alls, so nothing was written to a2a/. No AsyncAPI and no webhook surface; every published integration
    polls. The SearchLight API reference is served only inside the authenticated customer portal under Stored Objects > Portal
    > SearchLight API doc.
  evidence:
  - url: https://portal-digitalshadows.com/openapi.json
    status: 200
    note: HTML SPA shell, does not parse as OpenAPI
  - url: https://portal-digitalshadows.com/api/
    status: 401
  - url: https://api.searchlight.app/openapi.json
    status: 401
  - url: https://portal-digitalshadows.com/.well-known/agent-card.json
    status: 200
    note: HTML SPA shell, rejected as a false positive