Uptycs

aid: uptycs
name: Uptycs
description: Uptycs is a unified cloud-native application protection platform (CNAPP) and extended detection and response
  (XDR) company. Built on osquery — which its founders helped commercialize at scale — the Uptycs platform streams structured
  telemetry from endpoints, cloud workloads, containers, and Kubernetes into a SQL-queryable security data lake, powering
  CSPM, CWPP, CIEM, vulnerability management, compliance, threat hunting, and detection and response from a single console.
  Each customer runs on a dedicated stack ({stack}.uptycs.io) whose JSON REST API covers alerts, events, assets, ad-hoc SQL
  queries, threat intelligence, lookup tables, and users. Uptycs is backed by investors including Norwest Venture Partners
  and Sapphire Ventures and maintains active SOC 2 Type II compliance.
url: https://raw.githubusercontent.com/api-evangelist/uptycs/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- norwest-venture-partners
- sapphire-ventures
x-tier: stub
x-tier-reason: portfolio-lead
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source:
  - authentication
  - security
  generated: '2026-09-03'
  method: derived
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-21'
x-enrichment:
  date: '2026-07-21'
  status: enriched
  artifacts_added: 10
  pass: local-v1
image: https://www.uptycs.com/hubfs/About%20Us%20Page%20SPI-2.png
tags:
- Security
- Cybersecurity
- CNAPP
- XDR
- Cloud Security
- Endpoint Security
- Kubernetes Security
- osquery
- Threat Detection
- Compliance
tags_raw:
- Security
- Cybersecurity
- CNAPP
- XDR
- Cloud Security
- Endpoint Security
- Kubernetes Security
- Osquery
- Threat Detection
- Compliance
apis:
- name: Uptycs Platform API
  description: Per-customer JSON REST API over each Uptycs stack covering alerts and alert rules, events and event rules,
    assets and asset groups/tags, ad-hoc and saved SQL (osquery) queries, threat indicators/sources/vendors, file carves,
    lookup tables, and users. Authenticated with a per-user API key/secret minted into a short-lived HS256 JWT bearer token.
    The full API reference is customer-gated in-product; the auth model and command surface are publicly documented through
    the official Uptycs pack for Cortex XSOAR.
  humanURL: https://www.uptycs.com/products/cnapp
  baseURL: https://{stack}.uptycs.io/public/api/customers/{customerId}
  tags:
  - Security
  - Alerts
  - Assets
  - Threat Intelligence
  - osquery
  tags_raw:
  - Security
  - Alerts
  - Assets
  - Threat Intelligence
  - Osquery
  properties:
  - type: Documentation
    url: https://xsoar.pan.dev/docs/reference/integrations/uptycs
  - type: Authentication
    url: authentication/uptycs-authentication.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://uptycs.com
- type: Pricing
  url: https://www.uptycs.com/pricing
- type: TermsOfService
  url: https://www.uptycs.com/terms-of-service
- type: PrivacyPolicy
  url: https://www.uptycs.com/privacy-policy
- type: Support
  url: https://support.uptycs.com/portal/en/home
- type: Blog
  url: https://www.uptycs.com/blog
- type: GitHubOrganization
  url: https://github.com/Uptycs
- type: Security
  url: https://www.uptycs.com/about/security
- type: Compliance
  url: https://www.uptycs.com/about/security
- type: TrustCenter
  url: security/uptycs-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/uptycs-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/uptycs-domain-security.yml
- type: Authentication
  url: authentication/uptycs-authentication.yml
- type: Conformance
  url: conformance/uptycs-conformance.yml
- type: Conventions
  url: conventions/uptycs-conventions.yml
- type: LLMsTxt
  url: llms/uptycs-llms.txt
- type: X-MCPServerCandidate
  url: mcp/uptycs-mcp.yml
  note: 'Renamed from MCPServer 2026-09-03 (roadmap#247): the manifest self-describes as status: candidate — a tool list derived
    from the published API contracts, not an existing server. The scorer already read the manifest and reported mcp_server
    correctly; the MCPServer type was crediting the artifact-type surfaces with a server that does not exist.'
- type: Packages
  url: packages/uptycs-packages.yml
- type: WellKnown
  url: well-known/uptycs-well-known.yml