# RiskIQ

**Canonical:** https://apis.io/providers/riskiq/  
**Website:** https://www.microsoft.com/security/business/siem-and-xdr/microsoft-defender-threat-intelligence  
**APIs profiled:** 0

RiskIQ was a San Francisco-based external threat intelligence and attack surface management company, known for its PassiveTotal platform (passive DNS, WHOIS, SSL certificate and host-pair intelligence), Digital Footprint external asset discovery, and External Threats brand/phishing detection. It exposed a developer REST API at api.riskiq.net and a research console at community.riskiq.com. Microsoft acquired RiskIQ in 2021 and folded its technology into Microsoft Defender Threat Intelligence (MDTI) and Microsoft Defender External Attack Surface Management (Defender EASM). As of this enrichment pass the riskiq.com domain runs on Microsoft/Azure infrastructure and www.riskiq.com issues a 301 redirect to the Microsoft Defender Threat Intelligence product page; the standalone RiskIQ/PassiveTotal API hosts (api.riskiq.net, community.riskiq.com) no longer accept connections. This profile is retained as a historical/acquired-company record with no live, independent API surface to enrich.

## Kin Score — 5.0 / 100 (minimal)

Scored 2026-08-21 under rubric 0.12.0. Trend: flat (+0.0 from 5.0).

| Facet | Score |
|---|---|
| Discoverability | 50.0 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 0.0 |
| Developer Ergonomics | 0.0 |
| Commercial Clarity | 0.0 |
| Access Clarity | 0.0 |

## Agent readiness — 0.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## Tags

Company, Security, Threat Intelligence, Attack Surface Management, Cybersecurity, Passive DNS, Acquired

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/riskiq/). Scores are computed from the provider's own public artifacts under a published rubric.