niche · 0.4 market domain

Security Operations

Score 18.3 / 100 50 providers +1 via APIs 9 APIs Search apis.io →

Providers using this tag (50)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 1 Complete, well-documented, and agent-ready
CrowdStrikeCybersecurityEndpoint SecurityEndpoint Detection and ResponseThreat Intelligence2 APIs67.7
Strong 2 Solid coverage with minor gaps
AxoniusAsset ManagementCybersecuritySaaS ManagementSaaS Security1 API56.2Picus SecurityCybersecuritySecurity ValidationBreach and Attack SimulationAdversarial Exposure Validation15 APIs55.8
Developing 11 Usable, with meaningful gaps to close
CywareThreat IntelligenceCybersecurityThreat Intelligence Platform2 APIs50.8Arctic WolfCompanySecurityCybersecurityManaged Detection and Response1 API50.7AnvilogicCompanySecurityCybersecurity2 APIs41.7ExabeamCompanyCybersecuritySecuritySIEM13 APIs41.3PantherCompanySecuritySIEMDetection and Response1 API54.0Splunk SOARSecuritySOARAutomationOrchestration1 API53.3AirMDRSecurityManaged Detection and ResponseAlert Triage4 APIs51.9ScannerCompanySecuritySIEMLog Analytics1 API51.7Google Cloud ChronicleIncident ResponseLog ManagementSecurity Analytics1 API48.4Vectra AICompanyCybersecurityNetwork Detection and ResponseThreat Detection2 APIs44.0Red CanaryCompanySecurityCybersecurityManaged Detection and Response1 API43.3
Thin 10 Limited public surface area
ReliaQuestCybersecurityThreat DetectionIncident Response2 APIs38.0NebulockCompanySecurityThreat HuntingThreat Detection1 API32.2HuntersCompanyCybersecuritySIEMSOC1 API30.8BlackpointCompanyCybersecurityManaged Detection and ResponseMDR27.0ThreatConnectCompanyCybersecurityThreat Intelligence15 APIs26.3TinesSecurity AutomationNo-CodeWorkflow Automation1 API37.5SimSpaceCompanyCybersecurityCyber RangeSecurity Training1 API35.0SwimlaneSOARSecurity OrchestrationAutomationIncident Response1 API33.7SecureworksCybersecurityXDRThreat Detection1 API33.0DeepwatchCompanyCybersecurityManaged Detection and Response1 API31.2
Emerging 18 Early or largely undocumented
Penfield.AICompanyCybersecuritySOC23.9TorqSecurity AutomationSOARHyper-AutomationSecurity Orchestration1 API23.4Vega SecurityCompanyCybersecuritySIEM23.4CardinalOpsCompanyCybersecurityDetection Engineering20.2CroglCompanySecurityCybersecurity20.1MitigataCompanyCybersecurityCyber InsuranceCompliance19.3Radiant SecurityCompanySecurityCybersecurity19.3AndesiteCompanyDefense GovernmentCybersecurity17.1ExaforceCompanySecurityCybersecurity17.0Prophet SecurityCompanyArtificial IntelligenceSecurityCybersecurity15.6Qevlar AICompanyEngineering ServicesSecurityCybersecurity13.97AICompanyCybersecuritySecurityArtificial Intelligence20.5Digital ShadowsCompanyCybersecurityThreat IntelligenceDigital Risk Protection1 API20.4RunbooksITSMITAMIT OperationsManaged Service Providers1 API17.3GruveCompanyArtificial IntelligenceAI InfrastructureCybersecurity13.9Abstract SecuritySecurityCybersecuritySIEMSecurity Data Pipeline13.6Legion SecurityCompanyCloud SaasSecurity13.5Cobalt AICompanyPhysical SecuritySecurity AutomationArtificial Intelligence12.3
Minimal 7 Almost no public developer surface
Mate SecurityCompanyCybersecuritySecurity10.9Tenex AICompanyCybersecurityManaged Detection and Response10.3Artemis SecurityCompanySecurityCybersecurityThreat Detection7.7HakimoCompanyPhysical SecurityVideo SurveillanceAccess Control10.8CotoolCompanyArtificial IntelligenceCybersecurity9.2BluevoyantCompanyCybersecurityManaged Detection and ResponseThreat Intelligence6.4Surf AICompanyArtificial IntelligenceSecurityCybersecurity6.0
Unrated 1 Not yet scored
Jask LabsCompanySecurityCybersecurity

APIs with this tag (9)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 1 Complete, well-documented, and agent-ready
Falcon MCP ServerCrowdStrike's first-party open-source MCP server. Self-hosted (uvx/pip/Docker/Bedrock/Cloud Run) and authen...67.7
Developing 4 Usable, with meaningful gaps to close
Trellix Helix APIAPI for the Trellix Helix security operations platform that integrates security controls from Trellix and o...52.2Trellix IOC (Indicators of Compromise) APIREST API interface for managing indicators of compromise within the Trellix security platform. Enables uplo...52.2Cyware MCP ServerOpen-source Model Context Protocol server, written in Go and published under MIT by Cyware Labs, that expos...50.8Anvilogic MCP ServerThe Anvilogic MCP Server is the platform's Model Context Protocol surface, letting AI agents and MCP client...41.7
Thin 3 Limited public surface area
GreyMatter APIThe GreyMatter API exposes select GreyMatter capabilities through a single GraphQL endpoint. All requests a...38.0SimSpace Platform APIThe SimSpace Portal Suite platform API. SimSpace describes the cyber range platform as built API-first, giv...35.0Deepwatch Security Center APIThe authenticated GraphQL API behind the Deepwatch Security Center console (devportal.deepwatch.com). The e...31.2
Emerging 1 Early or largely undocumented
Runbooks IT Operations PlatformThe Runbooks platform provides an integrated IT operations suite covering ITSM (service desk, incident mana...17.3

Companies reaching this through an API (1)

These companies publish an API, specification or operation carrying “Security Operations” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Trellix

Score breakdown

Frequency
47.9
log-scaled weighted occurrences
Breadth
1.2
spread across providers
Quality lift
30.3
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor

Related tags

SOC 15 co-occurrences SIEM 19 co-occurrences Threat Detection 29 co-occurrences Incident Response 20 co-occurrences Managed Detection and Response 8 co-occurrences Detection Engineering 6 co-occurrences SOAR 6 co-occurrences Threat Intelligence 15 co-occurrences

Where this tag comes from

Provider tag50
Api tag9

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/security-operations"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/security-operations"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/security-operations/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.