# Expel

**Canonical:** https://apis.io/providers/expel/  
**Website:** https://expel.com/  
**APIs profiled:** 1

Expel is a managed detection and response (MDR) provider that delivers 24x7 security operations across endpoint, network, cloud, SaaS, identity, Kubernetes, and phishing surfaces. Customers and integration partners interact with Expel primarily through Workbench, Expel's investigation and case-management platform, which exposes a gated REST API for sending signals in from third-party tools and pulling alerts, investigations, and remediation actions back out into SIEMs, SOARs, and ticketing systems.

## Kin Score — 22.2 / 100 (emerging)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 22.2).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 21.1 |
| Developer Ergonomics | 11.9 |
| Commercial Clarity | 47.4 |
| Access Clarity | 47.4 |

## Agent readiness — 3.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Free — onboarding: unknown, pricing: free, trial: no (confidence: medium).

## APIs (1)

- **Expel Workbench API** — The Expel Workbench API is a gated REST API used by customers and technology partners to integrate with the Expel MDR platform. The API powers ingest of signals from endpoint, c...

## Security (3)

- **Expel Domain Security** — TLSv1.2 · HSTS · DNSSEC · DMARC
- **Expel Vulnerability Disclosure** — security.txt · contact published
- **Expel Trust Center** — SOC 2, ISO 27001, GDPR, CSA STAR, FIPS 140

## Plans (1)

- **Expel Plans Pricing**

## Use cases (5)

- **24x7 SOC Outsourcing** — Augment or replace an internal SOC with Expel's analysts and Workbench platform
- **Cloud Security Monitoring** — Continuous monitoring and incident response across multi-cloud environments
- **Phishing Triage and Response** — Automated and analyst-assisted phishing investigation and remediation
- **SIEM and SOAR Augmentation** — Use Expel as the analyst layer on top of existing SIEM and SOAR investments
- **Compliance and Reporting** — Use Workbench data and reports to support SOC2, PCI, and other compliance regimes

## Tags

Cybersecurity, MDR, Managed Detection and Response, SOC, SIEM, Workbench

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/expel/). Scores are computed from the provider's own public artifacts under a published rubric.