stale · 0.6 market domain

SOC

Score 16.0 / 100 26 providers 1 APIs Search apis.io →

Providers using this tag (26)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 1 Solid coverage with minor gaps
Cisco XDRSecurityXDRThreat DetectionIncident Response12 APIs66.1
Developing 3 Usable, with meaningful gaps to close
HuntressCompanySecurityCybersecurityManaged Detection and Response2 APIs54.1Splunk SOARSecuritySOARAutomationOrchestration1 API44.7Arctic WolfCompanySecurityCybersecurityManaged Detection and Response1 API42.6
Thin 4 Limited public surface area
IntezerCompanyCybersecuritySecurityMalware Analysis1 API34.4ExabeamCompanyCybersecuritySecuritySIEM13 APIs34.2AnzennaCompanySecurityInsider RiskCybersecurity30.0HuntersCompanyCybersecuritySIEM1 API28.8
Emerging 13 Early or largely undocumented
Penfield.AICompanyCybersecuritySecurity Operations24.5DaylightCompanySecurityCybersecurityManaged Detection and Response1 API22.5ExpelCybersecurityMDRManaged Detection and Response1 API22.07AICompanyCybersecuritySecurityArtificial Intelligence20.5Radiant SecurityCompanySecurityCybersecuritySecurity Operations18.6Dropzone AISecurityAI AgentsAutonomous1 API16.1Qevlar AICompanyEngineering ServicesSecurityCybersecurity14.6ExaforceCompanySecurityCybersecuritySecurity Operations13.6Legion SecurityCompanyCloud SaasSecuritySecurity Operations13.4Command ZeroCompanySecurityCybersecurity13.2Prophet SecurityCompanyArtificial IntelligenceSecurityCybersecurity12.9SIEMonsterCompanySecuritySIEMCybersecurity12.1AndesiteCompanyDefense GovernmentCybersecuritySecurity Operations11.3
Minimal 5 Almost no public developer surface
Mate SecurityCompanyCybersecuritySecuritySecurity Operations10.9Tenex AICompanyCybersecuritySecurity OperationsManaged Detection and Response10.8CHIPS AllianceChiselEDAFPGAHardware8.7Artemis SecurityCompanySecurityCybersecurityThreat Detection7.6BritesemiCompanySemiconductorsASICSilicon IP3.4

APIs with this tag (1)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Thin 1 Limited public surface area
Hunters SOC Platform APIAuthentication-gated runtime API for the Hunters SOC platform, used for data ingestion (API/webhook collect...28.8

Score breakdown

Frequency
39.7
log-scaled weighted occurrences
Breadth
0.7
spread across providers
Quality lift
27.8
mean composite of providers using it
Cohesion
2.3
strength of nearest seed neighbor

Related tags

Security Operations 15 co-occurrences Incident Response 13 co-occurrences Managed Detection and Response 6 co-occurrences Threat Detection 16 co-occurrences SIEM 9 co-occurrences Cybersecurity 21 co-occurrences Security 20 co-occurrences AI Agents 8 co-occurrences

Where this tag comes from

Provider tag26
Api tag1

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/soc"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/soc"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/soc/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.