XDR
Business capabilities this tag reaches
Cybersecurity Management 1
Providers using this tag (14)
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Exemplar 2 Complete, well-documented, and agent-ready
Thin 5 Limited public surface area
Emerging 3 Early or largely undocumented
Unrated 1 Not yet scored
APIs with this tag (56)
Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →
Exemplar 50 Complete, well-documented, and agent-ready
Malwarebytes XDR APIThe XDR API from Malwarebytes — 4 operation(s) for xdr.Cisco XDR Actor APIActor operationsCisco XDR Asset APIAsset operationsCisco XDR Asset Mapping APIAsset Mapping operationsCisco XDR Asset Properties APIAsset Properties operationsCisco XDR Attack Pattern APIAttack Pattern operationsCisco XDR Bulk APIThe Bulk API from Cisco XDR — 1 operation(s) for bulk.Cisco XDR Bundle APIThe Bundle API from Cisco XDR — 2 operation(s) for bundle.Cisco XDR Campaign APICampaign operationsCisco XDR Casebook APICasebook operationsCisco XDR COA APICOA operationsCisco XDR Deliberate APIThis set of routes allow to quickly get answers from your integrations You might use them at the start of a...Cisco XDR Event APIEvents operationsCisco XDR Feed APIFeed operationsCisco XDR Feedback APIFeedback RoutesCisco XDR Health APIThis set of routes allow to check the health of your integrations setup Verify if your modules are setup co...Cisco XDR Incident APIIncident operationsCisco XDR Indicator APIIndicator operationsCisco XDR Inspect APIInspect related routesCisco XDR Investigation APIThe Investigation API from Cisco XDR — 8 operation(s) for investigation.Cisco XDR INVITE APIThe INVITE API from Cisco XDR — 2 operation(s) for invite.Cisco XDR Iroh APIThe Iroh API from Cisco XDR — 3 operation(s) for iroh.Cisco XDR Judgement APIJudgement operationsCisco XDR LOGIN APIThe LOGIN API from Cisco XDR — 4 operation(s) for login.Cisco XDR Malware APIMalware operationsCisco XDR MCP ServerModel Context Protocol server published by CiscoDevNet exposing 27 Cisco XDR tools across Inspect, Investig...Cisco XDR Metrics APIThe Metrics API from Cisco XDR — 1 operation(s) for metrics.Cisco XDR Module Instance APIModuleInstance RoutesCisco XDR Module Type APIModuleType RoutesCisco XDR Module Type Patch APIModuleTypePatch RoutesCisco XDR Note APIThe Note API from Cisco XDR — 8 operation(s) for note.Cisco XDR Observe APIThis set of routes allow to get in depth investigation data about a threat You might use them at the start ...Cisco XDR One Click APIOne-click RoutesCisco XDR Private Intel APIAccess private-intelCisco XDR Properties APIThe Properties API from Cisco XDR — 1 operation(s) for properties.Cisco XDR Query APIThis set of routes allow to query for records related to observable events.Results are returned in OCSF for...Cisco XDR Refer APIThis set of routes allow to get relevant Reference links and quickly pivot pursuing your investigation on a...Cisco XDR Relationship APIRelationship operationsCisco XDR Reputation APIThe Reputation API from Cisco XDR — 1 operation(s) for reputation.Cisco XDR Response APIIROH ResponseCisco XDR Session Cookie APICookie-based session validationCisco XDR Sighting APISighting operationsCisco XDR Status APIThe Status API from Cisco XDR — 1 operation(s) for status.Cisco XDR Target Record APITarget Record operationsCisco XDR Tool APITool operationsCisco XDR Verdict APIThe Verdict API from Cisco XDR — 1 operation(s) for verdict.Cisco XDR Version APIThe Version API from Cisco XDR — 1 operation(s) for version.Cisco XDR Vulnerability APIThe Vulnerability API from Cisco XDR — 9 operation(s) for vulnerability.Cisco XDR Webhook APIWebhook RoutesCisco XDR Webhook Result APIThe WebhookResult API from Cisco XDR — 2 operation(s) for webhookresult.
Developing 3 Usable, with meaningful gaps to close
Microsoft Defender XDR APIUnified extended detection and response API for automating workflows based on shared incident and advanced ...Cynet 360 API (On-Prem V1)REST API for the on-premises Cynet 360 deployment (V1). Documents authentication (get token), Cynet APIs fo...Cynet 360 API (SaaS V3)REST API for the Cynet 360 SaaS platform (V3). Provides programmatic access to alerts, hosts and host group...
Thin 1 Limited public surface area
Emerging 2 Early or largely undocumented
Companies reaching this through an API (2)
These companies publish an API, specification or operation carrying “XDR” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.
Score breakdown
Frequency
48.3
log-scaled weighted occurrences
Breadth
0.3
spread across providers
Quality lift
39.2
mean composite of providers using it
Cohesion
0.0
strength of nearest seed neighbor
Where this tag sits
Related tags
SOAR 6 co-occurrences
Endpoint Detection and Response 5 co-occurrences
Endpoint Security 8 co-occurrences
Threat Detection 9 co-occurrences
SIEM 5 co-occurrences
Incident Response 5 co-occurrences
Threat Intelligence 7 co-occurrences
Cloud Security 7 co-occurrences
Where this tag comes from
Provider tag14
Api tag56
Openapi tag1
Openapi op tag4
Markets provisional
Kin Score markets whose measured providers carry this tag. Share is the fraction of the market's measured providers that carry it — it describes the market, not this tag.
| Market | Share of the market's providers |
|---|---|
| Security (EDR, SIEM, SOAR) | 20% |
Work with this as data
Every tag here is available over the APIs.io API and to AI agents over MCP.