SaaS Alerts website screenshot

SaaS Alerts

SaaS Alerts is a SaaS security monitoring platform purpose-built for Managed Service Providers (MSPs). The platform detects anomalous user behavior, data exfiltration, account compromise, and unauthorized access across cloud applications including Microsoft 365, Google Workspace, Salesforce, Slack, and Dropbox. Key capabilities include machine learning-based threat detection, automated remediation workflows, multi-tenant MSP management, and integration with PSA and RMM platforms. SaaS Alerts was acquired by Kaseya in 2023.

1 APIs 0 Features
MSPSaaS SecuritySecurity MonitoringThreat DetectionMicrosoft 365Google WorkspaceMSSP

APIs

SaaS Alerts API

REST API (v0.20.0) providing programmatic access to the SaaS Alerts security monitoring platform. Enables MSP tools and SIEM/SOAR integrations to query security events, retrieve...

Collections

Pricing Plans

Rate Limits

Saas Alerts Rate Limits

5 limits

RATE LIMITS

FinOps

Semantic Vocabularies

Saas Alerts Context

4 classes · 12 properties

JSON-LD

API Governance Rules

SaaS Alerts API Rules

9 rules · 2 errors 7 warnings

SPECTRAL

JSON Structure

Saas Alerts Security Event Structure

0 properties

JSON STRUCTURE

Example Payloads

Resources

🔗
LinkedIn
LinkedIn
🔗
Website
Website
🔗
Documentation
Documentation
🔗
APIDocumentation
APIDocumentation
📰
Blog
Blog
🔗
PlatformOverview
PlatformOverview
📜
PrivacyPolicy
PrivacyPolicy
📜
TermsOfService
TermsOfService
🔗
Login
Login
💰
Pricing
Pricing

Sources

Raw ↑
opencollection: 1.0.0
info:
  name: SaaS Alerts API
  version: 0.20.0
items:
- info:
    name: Events
    type: folder
  items:
  - info:
      name: List Security Events
      type: http
    http:
      method: GET
      url: https://api.saasalerts.com/reports/events
      params:
      - name: eventType
        value: ''
        type: query
        description: Filter by event type
      - name: alertStatus
        value: ''
        type: query
        description: Filter by alert severity
      - name: startDate
        value: ''
        type: query
        description: Filter events from this date (ISO 8601 format)
      - name: endDate
        value: ''
        type: query
        description: Filter events up to this date (ISO 8601 format)
      - name: customerId
        value: ''
        type: query
        description: Filter by MSP customer/tenant identifier
      - name: application
        value: ''
        type: query
        description: Filter by monitored SaaS application
      - name: pageSize
        value: ''
        type: query
        description: Number of events per page (max 100)
      - name: page
        value: ''
        type: query
        description: Page number for pagination
      auth:
        type: apikey
        key: X-API-Key
        value: '{{X-API-Key}}'
        placement: header
    docs: Returns a list of security events detected across monitored SaaS applications. Supports filtering by event type,
      application, customer, date range, and severity.
  - info:
      name: Query Security Events
      type: http
    http:
      method: POST
      url: https://api.saasalerts.com/reports/event/query
      body:
        type: json
        data: '{}'
      auth:
        type: apikey
        key: X-API-Key
        value: '{{X-API-Key}}'
        placement: header
    docs: Executes a structured JSON query against the SaaS Alerts event data indexes. Supports complex filtering with multiple
      conditions, date ranges, event types, and severity levels. Returns matching events in JSON format.
- info:
    name: Reports
    type: folder
  items:
  - info:
      name: List Security Alerts
      type: http
    http:
      method: GET
      url: https://api.saasalerts.com/reports/alerts
      params:
      - name: alertStatus
        value: ''
        type: query
        description: Filter alerts by severity
      - name: resolved
        value: ''
        type: query
        description: Filter by resolution status
      - name: customerId
        value: ''
        type: query
        description: Filter by customer identifier
      - name: startDate
        value: ''
        type: query
        description: Filter alerts from this date
      - name: endDate
        value: ''
        type: query
        description: Filter alerts up to this date
      - name: pageSize
        value: ''
        type: query
        description: Number of alerts per page
      - name: page
        value: ''
        type: query
        description: Page number for pagination
      auth:
        type: apikey
        key: X-API-Key
        value: '{{X-API-Key}}'
        placement: header
    docs: Returns a list of active and historical security alerts across all monitored customers and applications. Alerts
      are generated when anomalous or suspicious behavior is detected.
  - info:
      name: List Monitored Customers
      type: http
    http:
      method: GET
      url: https://api.saasalerts.com/reports/customers
      params:
      - name: pageSize
        value: ''
        type: query
        description: Number of customers per page
      - name: page
        value: ''
        type: query
        description: Page number for pagination
      auth:
        type: apikey
        key: X-API-Key
        value: '{{X-API-Key}}'
        placement: header
    docs: Returns a list of MSP customer tenants being monitored by the SaaS Alerts platform.
  - info:
      name: List Monitored Users
      type: http
    http:
      method: GET
      url: https://api.saasalerts.com/reports/users
      params:
      - name: customerId
        value: ''
        type: query
        description: Filter by customer identifier
      - name: application
        value: ''
        type: query
        description: Filter by application
      - name: pageSize
        value: ''
        type: query
        description: Number of users per page
      - name: page
        value: ''
        type: query
        description: Page number for pagination
      auth:
        type: apikey
        key: X-API-Key
        value: '{{X-API-Key}}'
        placement: header
    docs: Returns a list of users across monitored customer tenants. Includes user activity summary and risk indicators.
bundled: true