stale · 0.7 market domain

Investigations

Score 16.5 / 100 13 providers +19 via APIs 26 APIs Search apis.io →
Workflows using this tag
Cortex XSOAR Incident Response Orchestration · Palo Alto Networks IoT Security Alert Investigation and Resolution · Palo Alto Networks Prisma Cloud Alert Triage and Dismissal · Palo Alto Networks Cortex XDR Endpoint Isolation and Verification · Palo Alto Networks Cortex XSIAM Incident-Driven Asset and XQL Hunt · Palo Alto Networks Prisma Cloud RQL Configuration and Asset Search · Palo Alto Networks Cortex XDR XQL Threat Hunt · Palo Alto Networks IoT Security Device Risk and Policy Recommendation · Palo Alto Networks
Business capabilities this tag reaches
Cybersecurity Management 5 Financial Crime Management 1 SaaS Platform Operations Management 1 Health, Safety & Environment Management 1 Software Product Engineering Management 1
Variants seen in the corpus: InvestigationInvestigations

Providers using this tag (13)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 2 Solid coverage with minor gaps
NuixForensicseDiscoveryCompliance2 APIs64.8Amazon DetectiveForensicsSecurity7 APIs58.5
Developing 1 Usable, with meaningful gaps to close
ChainalysisComplianceAMLTransaction MonitoringSanctions12 APIs42.5
Emerging 4 Early or largely undocumented
SkopenowCompanyOpen Source IntelligenceOSINT15.0Command ZeroCompanySecurityCybersecuritySOC12.6Hummingbird RegTechCompanyRegTechComplianceAML1 API24.0Clearview AIBiometricsFacial RecognitionIdentity3 APIs16.8
Minimal 6 Almost no public developer surface
K2 IntegrityCompanyCybersecurityRisk AdvisoryCompliance6.6Miru LabsCompanyCybersecuritySecurityInsider Threat3.4Chainalysis123Blockchain Analyticscrypto complianceFinancial Institutions10.1Eon PassCompanyAnti-CounterfeitingBrand ProtectionArtificial Intelligence9.1NexLPCompanyLegalLegal TechArtificial Intelligence3.4DechertAntitrustArbitrationArtificial IntelligenceAsset Management2.4

APIs with this tag (26)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 3 Complete, well-documented, and agent-ready
SafetyCulture Investigations APIThe Investigations API from SafetyCulture — 27 operation(s) for investigations.75.5Splunk Enterprise Security APIThe Splunk Enterprise Security API provides REST endpoints for accessing and modifying findings, investigat...70.9Cisco XDR Investigation APIThe Investigation API from Cisco XDR — 8 operation(s) for investigation.68.1
Strong 5 Solid coverage with minor gaps
Palo Alto Networks Investigations APIInvestigation management.63.4Fiat Republic Investigations APIThe Investigations API from Fiat Republic — 2 operation(s) for investigations.58.7Amazon Web Services Investigations APIThe Investigations API from Amazon Web Services — 5 operation(s) for investigations.58.6Amazon Detective Investigations APISecurity investigation operations58.5Contraforce Investigation APIThe Investigation API from Contraforce — 2 operation(s) for investigation.58.1
Developing 8 Usable, with meaningful gaps to close
Alloy Investigations APIInvestigation lifecycle, assignment, review, archival, and types.52.8TeamCity Investigations APIManage build and test investigations52.1Deeptrace Investigations APITrigger and retrieve asynchronous root-cause investigations.50.0Securonix Investigations APIThe Investigations API from Securonix — 2 operation(s) for investigations.43.2Chainalysis Crypto InvestigationsManaged investigation service where Chainalysis analysts conduct or assist with crypto-related investigatio...42.5Chainalysis RapidAI-powered triage product for instant assessment of crypto addresses and transactions - surfaces key risk a...42.5Chainalysis ReactorInvestigation product for tracing funds across blockchains - graph explorer, address clustering, and case m...42.5Spyderbat Investigation APIInvestigations can be created by users as a way to have an investigation into a potential attack, allowing ...41.8
Thin 6 Limited public surface area
Montran Case ManagementAn online system for the automatic processing of all inquiries related to payments, both foreign and domest...39.1McAfee (Trellix) Investigations APIThreat investigation workflows and actions38.4Rapid7 InsightIDR APIREST API for the InsightIDR SIEM/XDR product covering investigations, alerts, log search, threats, and SOC ...37.6Rapid7 Investigations APIThe Investigations API from Rapid7 — 4 operation(s) for investigations.37.6Demisto Investigations APIThe Investigations API from Demisto — 1 operation(s) for investigations.36.7Cybereason REST APIThe Cybereason REST API is a gated, region-scoped API hosted at api..cybereason.net that allows customers a...36.2
Emerging 4 Early or largely undocumented
Hummingbird APILogin-gated REST API for the Hummingbird financial-crime compliance platform — used to create and manage in...24.0Sardine Case Management APIProgrammatic access to Sardine's unified case management surface for fraud and AML investigations. Cases ar...21.4Expel Workbench APIThe Expel Workbench API is a gated REST API used by customers and technology partners to integrate with the...20.0Clearview AI Investigation ToolsClearview AI offers investigation tooling for vetted law enforcement and public-safety users that surfaces ...16.8

Companies reaching this through an API (19)

These companies publish an API, specification or operation carrying “Investigations” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Alloy Amazon Web Services Cisco XDR Contraforce Cybereason Deeptrace Demisto Expel Fiat Republic McAfee (Trellix) Montran Palo Alto Networks Rapid7 SafetyCulture Sardine Securonix Splunk Spyderbat TeamCity

Score breakdown

Frequency
46.7
log-scaled weighted occurrences
Breadth
0.3
spread across providers
Quality lift
21.7
mean composite of providers using it
Cohesion
2.7
strength of nearest seed neighbor

Related tags

SOAR 5 co-occurrences Vulnerabilities 5 co-occurrences SIEM 5 co-occurrences Threat Detection 7 co-occurrences Threat Intelligence 6 co-occurrences Schedule 5 co-occurrences KYC 5 co-occurrences

Where this tag comes from

Api tag26
Provider tag13
Openapi tag12
Openapi op tag36

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/investigations"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/investigations"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/investigations/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.