niche · 0.8 market domain

Security Operations

Score 19.2 / 100 49 providers +1 via APIs 11 APIs Search apis.io →

Providers using this tag (49)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 1 Complete, well-documented, and agent-ready
Strong 2 Solid coverage with minor gaps
Developing 10 Usable, with meaningful gaps to close
Thin 10 Limited public surface area
Emerging 17 Early or largely undocumented
Minimal 8 Almost no public developer surface
Unrated 1 Not yet scored

APIs with this tag (10)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 1 Complete, well-documented, and agent-ready
Strong 1 Solid coverage with minor gaps
Developing 3 Usable, with meaningful gaps to close
Thin 4 Limited public surface area
Emerging 1 Early or largely undocumented

Companies reaching this through an API (1)

These companies publish an API, specification or operation carrying “Security Operations” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Trellix

Score breakdown

Frequency
48.6
log-scaled weighted occurrences
Breadth
1.3
spread across providers
Quality lift
33.5
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor

Related tags

SOC 15 co-occurrences Threat Detection 29 co-occurrences SIEM 19 co-occurrences Incident Response 20 co-occurrences Managed Detection and Response 8 co-occurrences Detection Engineering 6 co-occurrences SOAR 6 co-occurrences Threat Intelligence 14 co-occurrences

Where this tag comes from

Provider tag49
Api tag11

Cohort brief

Auto-generated

The 48 providers in the APIs.io catalog tagged Security Operations, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers
48
of 49 in the catalog
Mean Kin Score
27.3
+4.4 vs catalog 22.9
Mean Agent Readiness
11.2
-0.7 vs catalog 11.9
Spread
6–67.1
median 23.4 · σ 15.4
How the 48 split by band
Exemplar 1Strong 2Developing 10Thin 10Emerging 17Minimal 8
Facet averages, against the whole catalog
FacetThis cohortCatalogDifferenceScored
Access Clarity 36.1 26.5 +9.6 48
Developer Ergonomics 27.7 23.2 +4.5 48
Discoverability 62.2 58.1 +4.1 48
Operational Transparency 17.4 13.7 +3.7 48
Contract Governance 8.9 6.3 +2.6 48
Contract Quality 15.3 17.6 -2.3 48

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes
ArtifactThis cohortCatalogDifference
MCP server (any) 20% 14% +6
MCP server (first-party) 18% 12% +6
Agent Skills 0% 0% 0
OAuth scopes 14% 11% +3
Security 98% 98% 0
Arazzo workflows 2% 2% 0
Governance rules 8% 14% -6

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score
  1. 1 CrowdStrike 67.1
  2. 2 AirMDR 55.1
  3. 3 Panther 54.6
  4. 4 Axonius 51.4
  5. 5 Picus Security 49.3
  6. 6 Cyware 49.2
  7. 7 Splunk SOAR 44.7
  8. 8 Vectra AI 43.2
  9. 9 Google Cloud Chronicle 43
  10. 10 Arctic Wolf 42.6
Top by Agent Readiness
  1. 1 AirMDR 45.8
  2. 2 CrowdStrike 35.1
  3. 3 Cyware 32.4
  4. 4 Panther 30.8
  5. 5 Picus Security 27.8
  6. 6 Scanner 27.4
  7. 7 Axonius 25.8
  8. 8 Google Cloud Chronicle 24.8
  9. 9 Vectra AI 24.6
  10. 10 Anvilogic 23
All 49 members of this roster resolve to a provider in the catalog; 48 carry a score (98%). The figures above describe the scored members only.
Coverage caveat. 42 of 48 scored members had under half their catalog-attributable points satisfied at all (catalog_earned / catalog_max < 0.5). They are INCLUDED in the mean above. A large share here means the cohort mean is partly a measurement of how far our enrichment reached, not only of how these providers publish.Generated from the catalog build of 5 October 2026, across 29093 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag
curl "https://apis.io/api/v1/tags/security-operations"
All tags
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort
curl "https://apis.io/api/v1/cohorts/tag/security-operations"
The distribution (Pro)
curl "https://apis.io/api/v1/cohorts/tag/security-operations/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.