Lastline

Lastline was a Santa Barbara, California cybersecurity company founded in 2011, building high-resolution malware analysis and network detection and response (NDR) technology based on full-system emulation sandboxing. Its developer-facing surface is the Lastline Analyst API (marketed in the company's earliest years as the Previct Analyst API), an asynchronous web API for submitting files and URLs to the Lastline analysis cloud and retrieving detailed behavioral analysis reports, indicators of compromise and analysis artifacts. Lastline was acquired by VMware in 2020 and the technology was folded into VMware NSX Network Detection and Response; VMware was subsequently acquired by Broadcom. The lastline.com marketing site is retired and no longer answers HTTP, but the customer portal at user.lastline.com is live and branded "NSX - Network Detection and Response" behind a Broadcom Inc. TLS certificate, and the full Analyst API reference plus its first-party Python client downloads remain served. This profile captures that surviving API surface from the live first-party documentation, together with probes recording what is no longer published.

Lastline publishes 1 API on the APIs.io network. Tagged areas include Company, Cybersecurity, Malware Analysis, Sandboxing, and Threat Intelligence.

Lastline’s developer surface includes developer portal, changelog, CLI, documentation, API reference, getting-started guide, support, and 7 more developer resources.

🌐 Visit website 📡 Source on GitHub

21.7/100 emerging Agent 0/100 human only Full breakdown ↓
scored 2026-07-20 · rubric v0.4

1 APIs 0 Features

CompanyCybersecurityMalware AnalysisSandboxingThreat IntelligenceNetwork Detection and ResponseSecurityAcquired

API Rating

API Evangelist Rating How this is scored →
scored 2026-07-20 · rubric v0.4

Composite quality — 21.7/100 · emerging

Contract Quality 0.0 / 25

Developer Ergonomics 10.4 / 20

Commercial Clarity 0.0 / 20

Operational Transparency 2.1 / 13

Governance 0.0 / 12

Discoverability 9.3 / 10

Agent readiness — 0/100 · human only

Machine-Readable Contract 0 / 18

Agentic Access Contract 0 / 15

MCP Server 0 / 12

Machine-Readable Auth 0 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/lastline: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Get Started 2

Portal, sign-up, and the first successful call

Portal

Portal

GettingStarted

GettingStarted

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIReference

APIReference

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

LLMsTxt

LLMsTxt

Design & Contract 2

Pagination, idempotency, versioning, errors, and events

Lifecycle

Lifecycle

Conformance

Conformance

Build 3

SDKs, sample code, and the tooling you integrate with

Packages

Packages

SDKs

SDKs

CLI

CLI

Access & Security 1

Authentication, authorization, and security posture

DomainSecurity

DomainSecurity

Operate 2

Status, limits, changes, and where to get help

ChangeLog

ChangeLog

Support

Support

Company 1

The organization behind the API

Website

Website

Source (apis.yml)

aid: lastline
name: Lastline
description: Lastline was a Santa Barbara, California cybersecurity company founded in 2011, building high-resolution malware
  analysis and network detection and response (NDR) technology based on full-system emulation sandboxing. Its developer-facing
  surface is the Lastline Analyst API (marketed in the company's earliest years as the Previct Analyst API), an asynchronous
  web API for submitting files and URLs to the Lastline analysis cloud and retrieving detailed behavioral analysis reports,
  indicators of compromise and analysis artifacts. Lastline was acquired by VMware in 2020 and the technology was folded into
  VMware NSX Network Detection and Response; VMware was subsequently acquired by Broadcom. The lastline.com marketing site
  is retired and no longer answers HTTP, but the customer portal at user.lastline.com is live and branded "NSX - Network Detection
  and Response" behind a Broadcom Inc. TLS certificate, and the full Analyst API reference plus its first-party Python client
  downloads remain served. This profile captures that surviving API surface from the live first-party documentation, together
  with probes recording what is no longer published.
url: https://raw.githubusercontent.com/api-evangelist/lastline/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- redpoint-ventures
x-tier: stub
x-tier-reason: portfolio-lead
x-status: acquired
x-acquired-by: VMware
x-acquired-year: '2020'
x-successor-product: VMware NSX Network Detection and Response
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-19'
image: https://user.lastline.com/favicon.ico
tags:
- Company
- Cybersecurity
- Malware Analysis
- Sandboxing
- Threat Intelligence
- Network Detection and Response
- Security
- Acquired
apis:
- aid: lastline:analyst-api
  name: Lastline Analyst API
  description: 'Web API for submitting files (PE, PDF, Office documents, Flash, Java applets, Android applications, archives)
    and URLs to the Lastline analysis cloud for high-resolution behavioral malware analysis, then retrieving task results,
    analysis reports, behavior activities, generated artifacts and network indicators of compromise. The API is asynchronous:
    submissions return a task UUID which is later resolved through get_completed() and get_result(). Responses are JSON or
    XML selected by a URL extension. The reference documentation remains live at analysis.lastline.com.'
  humanURL: https://analysis.lastline.com/analysis/api-docs/html/overview.html
  baseURL: https://analysis.lastline.com/analysis
  tags:
  - Malware Analysis
  - Sandboxing
  - Threat Intelligence
  - Security
  properties:
  - type: Documentation
    url: https://analysis.lastline.com/analysis/api-docs/html/overview.html
  - type: APIReference
    url: https://analysis.lastline.com/analysis/api-docs/html/api.html
  - type: GettingStarted
    url: https://analysis.lastline.com/analysis/api-docs/html/overview.html#getting-started
  - type: Authentication
    url: authentication/lastline-authentication.yml
  - type: ErrorCatalog
    url: errors/lastline-error-codes.yml
  - type: Conventions
    url: conventions/lastline-conventions.yml
  - type: DataModel
    url: data-model/lastline-data-model.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: http://www.lastline.com/
- type: Portal
  url: https://user.lastline.com/portal
- type: Packages
  url: packages/lastline-packages.yml
- type: SDKs
  url: packages/lastline-packages.yml
- type: Lifecycle
  url: lifecycle/lastline-lifecycle.yml
- type: Conformance
  url: conformance/lastline-conformance.yml
- type: ChangeLog
  url: changelog/lastline-changelog.yml
- type: CLI
  url: cli/lastline-cli.yml
- type: Documentation
  url: https://analysis.lastline.com/analysis/api-docs/html/index.html
- type: APIReference
  url: https://analysis.lastline.com/analysis/api-docs/html/api.html
- type: GettingStarted
  url: https://analysis.lastline.com/analysis/api-docs/html/overview.html#getting-started
- type: Support
  url: https://my.vmware.com/group/vmware/get-help
- type: DomainSecurity
  url: security/lastline-domain-security.yml
- type: LLMsTxt
  url: llms/lastline-llms.txt
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence