niche · 1.2 market domain

Threats

Score 19.6 / 100 1 providers +14 via APIs 14 APIs Search apis.io →
Workflows using this tag
Cortex XSOAR Incident Response Orchestration · Palo Alto Networks IoT Security Alert Investigation and Resolution · Palo Alto Networks Prisma Cloud Alert Triage and Dismissal · Palo Alto Networks Cortex XDR Endpoint Isolation and Verification · Palo Alto Networks Cortex XSIAM Incident-Driven Asset and XQL Hunt · Palo Alto Networks Prisma Cloud RQL Configuration and Asset Search · Palo Alto Networks Cortex XDR XQL Threat Hunt · Palo Alto Networks IoT Security Device Risk and Policy Recommendation · Palo Alto Networks
Business capabilities this tag reaches
Cybersecurity Management 7 Enterprise Risk Management 1

Providers using this tag (1)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Developing 1 Usable, with meaningful gaps to close
Google Safe BrowsingGoogleMalwareSafe BrowsingSecurity1 API43.0

APIs with this tag (14)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 5 Complete, well-documented, and agent-ready
Datadog CSM Threats APIThe CSM Threats API provides endpoints for managing Cloud Security Management Workload Protection agent rul...79.2OneTrust Threats APIAPIs to handle threat library operations including threat creation, modification, deletion, and comprehensi...77.1Microsoft Graph Security APIConnect security products, services, and partners to streamline security operations and improve threat prot...69.5Palo Alto Networks Threats APIThreat signature lookup and metadata retrieval.68.1Feedly Threats APIThe Threats API from Feedly — 1 operation(s) for threats.67.7
Strong 3 Solid coverage with minor gaps
Picus Security Threats APIThe Threats API from Picus Security — 13 operation(s) for threats.55.6Abnormal AI Threats APIAPIs to manage threats notified in the Abnormal Threat Log54.8Upwind Threats APIThe threats API from Upwind — 18 operation(s) for threats.54.6
Developing 2 Usable, with meaningful gaps to close
Base Operations Threats APIThe Threats API from Base Operations — 6 operation(s) for threats.50.3Trellix Threats APIQuery aggregated threat intelligence including threat names, severity rankings, SHA256 hashes, and MITRE AT...41.8
Thin 3 Limited public surface area
Ocean Security Threats APIOperations for retrieving threat information38.5McAfee (Trellix) Threats APIRetrieve and manage detected threats36.8DevArmor Threats APIThe threats API from DevArmor — 2 operation(s) for threats.35.7
Emerging 1 Early or largely undocumented
Abnormal Security Platform APIThe Abnormal Security Platform REST API at api.abnormalplatform.com gives customers and integration partner...16.3

Companies reaching this through an API (14)

These companies publish an API, specification or operation carrying “Threats” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Abnormal AI Abnormal Security Base Operations Datadog DevArmor Feedly McAfee (Trellix) Microsoft Office 365 Ocean Security OneTrust Palo Alto Networks Picus Security Trellix Upwind

Score breakdown

Frequency
36.6
log-scaled weighted occurrences
Breadth
0.0
spread across providers
Quality lift
51.5
mean composite of providers using it
Cohesion
0.9
strength of nearest seed neighbor

Related tags

Vulnerabilities 5 co-occurrences Threat Intelligence 8 co-occurrences Cybersecurity 8 co-occurrences Security 10 co-occurrences Integration 7 co-occurrences Compliance 6 co-occurrences User 7 co-occurrences Event 5 co-occurrences

Where this tag comes from

Api tag14
Provider tag1
Openapi tag8
Openapi op tag27

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/threats"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort (paid plan)
The distribution (Pro)

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.