niche · 0.5

SIEM

Score 19.8 / 100 54 providers 14 APIs Search apis.io →
Variants seen in the corpus: SIEMsiem

Providers using this tag (54)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 2 Solid coverage with minor gaps
Logz.ioObservabilityLoggingMetricsTracing19 APIs65.2DatadogAnalyticsDashboardsMonitoringPlatform290 APIs57.1
Developing 17 Usable, with meaningful gaps to close
PantherCompanySecurityDetection and Response21 APIs54.0HuntressCompanySecurityCybersecurityManaged Detection and Response17 APIs53.3LevelBlueCompanyEnterpriseCybersecuritySecurity4 APIs52.2Amazon Security LakeData LakeSecurityThreat Detection3 APIs51.4Nord SecurityCybersecurityThreat IntelligenceDark Web MonitoringAttack Surface Management10 APIs50.7ArmorCompanyCybersecurityManaged Detection and ResponseCloud Security70 APIs47.4SplunkAnalyticsData AnalysisLoggingMachine Data14 APIs46.5Push SecurityCompanyEnterpriseSecurityIdentity1 API45.7Sumo LogicLoggingObservabilitySecurityMonitoring54 APIs43.5TrellixCloud SecurityCybersecurityEndpoint SecurityThreat Detection27 APIs43.5Workday SecurityAccess ControlAuditAuthenticationCompliance13 APIs43.3Google Cloud ChronicleIncident ResponseLog ManagementSecurity AnalyticsSecurity Operations4 APIs42.9Rapid7SecurityVulnerability ManagementXDR50 APIs42.7Microsoft SentinelMicrosoftSecuritySOAR5 APIs42.2ScannerCompanySecurityLog Analytics6 APIs40.8Vectra AICompanyCybersecurityNetwork Detection and ResponseThreat Detection17 APIs39.9RunRevealCompanySecuritySecurity Log Management1 API39.7
Thin 10 Limited public surface area
Stellar CyberCybersecuritySecurityXDR11 APIs39.1SophosCybersecurityEndpoint ProtectionSecurity2 APIs37.4TessianCompanyEnterpriseEmail SecurityCybersecurity10 APIs34.4DevoCompanyCybersecuritySecurity6 APIs33.7NebulockCompanySecurityThreat HuntingThreat Detection4 APIs32.2ExabeamCompanyCybersecuritySecurity13 APIs30.6AnaplanConnected PlanningEnterprise PlanningFP&ASupply Chain6 APIs30.5AnvilogicCompanySecurityCybersecuritySecurity Operations2 APIs29.6HuntersCompanyCybersecuritySOC1 API29.5LookoutCompanyCybersecurityMobile SecurityEndpoint Security1 API26.9
Emerging 18 Early or largely undocumented
StriderCompanyStrategic IntelligenceThreat IntelligenceRisk Management2 APIs25.0ResurfaceAPI AnalyticsAPI ComplianceAPI LoggingAPI Observability5 APIs23.3ExpelCybersecurityMDRManaged Detection and ResponseSOC1 API22.2IBM QRadar Security Intelligence PlatformAnalyticsLog ManagementSecurity2 APIs20.7BlackpointCompanyCybersecurityManaged Detection and ResponseMDR19.3CardinalOpsCompanyCybersecuritySecurity OperationsDetection Engineering19.1Radiant SecurityCompanySecurityCybersecuritySecurity Operations18.6Dropzone AISecuritySOCAI AgentAutonomous1 API18.5HalcyonCompanyAI InfrastructureCybersecurityRansomware1 API18.4HumioCompanyBig DataLog ManagementObservability1 API17.1CroglCompanySecurityCybersecuritySecurity Operations17.0AnomaliCompanyEnterpriseCybersecurityThreat Intelligence1 API16.2VegaCompanySecuritySecurity Operations15.3CounterTackCompanySecurityCybersecurityEndpoint Security1 API14.9Vega SecurityCompanyCybersecuritySecurity Operations14.5ExaforceCompanySecurityCybersecuritySecurity Operations13.5GraylogLoggingObservabilityLog Management1 API13.3SIEMonsterCompanySecurityCybersecurity12.1
Minimal 7 Almost no public developer surface
Artemis SecurityCompanySecurityCybersecurityThreat Detection8.6Ostra SecurityCompanySecurityCybersecurityManaged Security8.5ArcSightCompanySecurityCybersecurity7.9Jask LabsCompanySecurityCybersecuritySecurity Operations5.0ObservoCompanyData PipelineObservabilitySecurity5.0Observo AiCompanyData PipelineObservabilitySecurity5.0SenSageCompanySecurityLog Management5.0

APIs with this tag (14)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Strong 2 Solid coverage with minor gaps
Logz.io Cloud SIEM APILogz.io Cloud SIEM control plane — manage detection rules (correlation and threshold), retrieve raised secu...65.2Datadog Security Monitoring APIThe Security Monitoring API allows you to create and manage security rules, signals, and filters. It provid...57.1
Developing 6 Usable, with meaningful gaps to close
Huntress SIEM APIQuery your SIEM logs programmatically using 53.3NordStellar Platform Integrations APIConnects NordStellar's monitoring features to external security tools, dashboards and automated workflows —...50.7Splunk Enterprise Security APIThe Splunk Enterprise Security API provides REST endpoints for accessing and modifying findings, investigat...46.5Trellix Helix APIAPI for the Trellix Helix security operations platform that integrates security controls from Trellix and o...43.5Workday User Activity Logging APIREST API for retrieving user activity logs and signon data from a Workday tenant. Returns detailed JSON rec...43.3Rapid7 InsightIDR APIREST API for the InsightIDR SIEM/XDR product covering investigations, alerts, log search, threats, and SOC ...42.7
Thin 2 Limited public surface area
Anaplan Audit APITracks and streams audit events and security alerts for integration with Security Information and Event Man...30.5Hunters SOC Platform APIAuthentication-gated runtime API for the Hunters SOC platform, used for data ingestion (API/webhook collect...29.5
Emerging 4 Early or largely undocumented
Strider Shield APIShield is Strider's curated nation-state threat-intelligence dataset — high-risk email addresses, malicious...25.0QRadar REST APICore REST API for managing QRadar SIEM functionality including offenses, assets, rules, and searches.20.7Dropzone AI Platform IntegrationsDropzone AI's primary "API surface" is its catalog of 90+ outbound integrations to SIEM, EDR/XDR, identity,...18.5Graylog REST APIGraylog provides a REST API for managing log data, streams, dashboards, alerts, users, and system configura...13.3

Score breakdown

Frequency
49.2
log-scaled weighted occurrences
Breadth
1.5
spread across providers
Quality lift
35.4
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor

Related tags

Threat Detection 32 co-occurrences Security Operations 18 co-occurrences Log Management 12 co-occurrences SOC 9 co-occurrences SOAR 7 co-occurrences Managed Detection and Response 7 co-occurrences Incident Response 10 co-occurrences XDR 5 co-occurrences

Where this tag comes from

Provider tag48
Api tag14

Cohort brief

Auto-generated

The 54 providers in the APIs.io catalog tagged SIEM, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers
54
all scored
Mean Kin Score
29.4
+8.7 vs catalog 20.7
Mean Agent Readiness
14.9
+5.2 vs catalog 9.7
Spread
5–65.2
median 29.6 · σ 15.9
How the 54 split by band
Exemplar 0Strong 2Developing 17Thin 10Emerging 18Minimal 7
Facet averages, against the whole catalog
FacetThis cohortCatalogDifferenceScored
Access Clarity 35 22.3 +12.7 54
Developer Ergonomics 30.5 17.9 +12.6 54
Discoverability 68.3 60.4 +7.9 54
Operational Transparency 18.1 11.3 +6.8 54
Contract Quality 23.8 17.5 +6.3 54
Contract Governance 10.2 6.4 +3.8 54

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes
ArtifactThis cohortCatalogDifference
MCP server (any) 33% 16% +17
MCP server (first-party) 17% 7% +10
Agent Skills 0% 0% 0
OAuth scopes 20% 9% +11
Security 96% 88% +8
Arazzo workflows 9% 2% +7
Governance rules 22% 13% +9

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score
  1. 1 Logz.io 65.2
  2. 2 Datadog 57.1
  3. 3 Panther 54
  4. 4 Huntress 53.3
  5. 5 LevelBlue 52.2
  6. 6 Amazon Security Lake 51.4
  7. 7 Nord Security 50.7
  8. 8 Armor 47.4
  9. 9 Splunk 46.5
  10. 10 Push Security 45.7
Top by Agent Readiness
  1. 1 Huntress 54.9
  2. 2 Nord Security 45.7
  3. 3 Armor 43
  4. 4 Datadog 38.3
  5. 5 Rapid7 34
  6. 6 Splunk 34
  7. 7 LevelBlue 30.8
  8. 8 Panther 30.8
  9. 9 Scanner 29.6
  10. 10 Strider 27.3
All 54 members of this roster resolve to a scored provider in the catalog.Generated from the catalog build of 25 August 2026, across 26891 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/siem"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/siem"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/siem/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.