Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 51 Complete, well-documented, and agent-ready

Developing 2 Usable, with meaningful gaps to close

Cynet 360 API (On-Prem V1)REST API for the on-premises Cynet 360 deployment (V1). Documents authentication (get token), Cynet APIs fo...46.3 Cynet 360 API (SaaS V3)REST API for the Cynet 360 SaaS platform (V3). Provides programmatic access to alerts, hosts and host group...46.3

Thin 1 Limited public surface area

Rapid7 InsightIDR APIREST API for the InsightIDR SIEM/XDR product covering investigations, alerts, log search, threats, and SOC ...35.2

Emerging 2 Early or largely undocumented

SentinelOne Management APITenant-scoped REST API for managing agents, threats, alerts, sites, accounts, exclusions, policies, and rep...21.3 Dropzone AI Platform IntegrationsDropzone AI's primary "API surface" is its catalog of 90+ outbound integrations to SIEM, EDR/XDR, identity,...11.0

Companies reaching this through an API (2)

These companies publish an API, specification or operation carrying “XDR” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Malwarebytes Microsoft Defender

Score breakdown

Frequency

45.8

log-scaled weighted occurrences

Breadth

0.2

spread across providers

Quality lift

36.3

mean composite of providers using it

Cohesion

0.0

strength of nearest seed neighbor

Where this tag sits

Cybersecurity broader

Where this tag comes from

Provider tag15

Api tag56

Openapi tag1

Openapi op tag4

Markets provisional

Kin Score markets whose measured providers carry this tag. Share is the fraction of the market's measured providers that carry it — it describes the market, not this tag.

Market	Share of the market's providers
Security (EDR, SIEM, SOAR)	20%

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this

find_tagsBrowse and filter every tag in the catalog.
get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This tag

curl "https://apis.io/api/v1/tags/xdr"

All tags

curl "https://apis.io/api/v1/tags?limit=25"

As a scored cohort (paid plan)

The distribution (Pro)

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

XDR

Providers using this tag (15)

APIs with this tag (56)