Use Case

Threat Detection & Security Operations

Detecting attacks and closing security exposure.

36 providers 190 APIs 30 declared variants

Collecting security telemetry, correlating it against detection rules and threat intelligence, and running the vulnerability, posture, and hardening work a security operations team owns.

36 API providers on the APIs.io network offer threat detection & security operations. The highest-rated are Amazon Neptune, Datadog, Microsoft Active Directory, Shodan, Amazon Security Lake.

Providers

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 4 Complete, well-documented, and agent-ready
Amazon Neptune Amazon Neptune is a fast, reliable, fully managed graph database service that makes it easy to build and ru... 9 APIs 76.5 Datadog Datadog is a monitoring and analytics platform that helps organizations gain insight into their infrastruct... 85 APIs 73.6 Microsoft Active Directory Microsoft Active Directory and Microsoft Entra ID provide identity and access management for organizations ... 10 APIs 71.4 Shodan Shodan is the world's first search engine for Internet-connected devices. It continuously crawls the public... 5 APIs 70.9
Strong 11 Solid coverage with minor gaps
Amazon Security Lake Amazon Security Lake is a service that automatically centralizes an organization's security data from cloud... 1 API 68.3 IPinfo IPinfo is an IP address data and intelligence platform that provides geolocation (country, region, city, co... 1 API 67.9 Amazon Detective Amazon Detective is a security investigation service that makes it easy to analyze, investigate, and quickl... 1 API 67.0 AbuseIPDB AbuseIPDB is a community-driven project to help system administrators, webmasters, and security analysts ch... 1 API 66.6 Aqua Security Aqua Security provides cloud-native security for the full application lifecycle, protecting containers, ser... 3 APIs 64.9 Varonis Varonis is a pioneer in data security and analytics, specializing in software for data security, governance... 4 APIs 64.7 Amazon IoT Device Defender AWS IoT Device Defender is a security service that lets you continuously audit your IoT configurations to d... 1 API 64.5 Amazon Security Hub AWS Security Hub is a cloud security posture management service that provides a comprehensive view of your ... 1 API 64.1 Amazon Kinesis Data Firehose Amazon Kinesis Data Firehose is the easiest way to reliably load streaming data into data lakes, data store... 1 API 63.2 Google Workspace A collection of productivity and collaboration tools from Google including Gmail, Drive, Calendar, Meet, an... 27 APIs 63.2 CAST AI CAST AI is an Application Performance Automation (APA) platform for Kubernetes that automates cost optimiza... 1 API 62.9
Developing 8 Usable, with meaningful gaps to close
Amazon GuardDuty Amazon GuardDuty is an intelligent threat detection service that continuously monitors your AWS accounts, w... 1 API 59.8 AT&T Developer Hub The AT&T Developer Hub provides access to cutting-edge network APIs including 5G, edge computing, and CAMAR... 6 APIs 59.6 Censys Censys is an internet intelligence and attack surface management platform that continuously scans the publi... 2 APIs 58.6 Amazon CloudTrail AWS CloudTrail enables governance, compliance, operational auditing, and risk auditing of your AWS account ... 1 API 58.4 Akamai API Security Akamai API Security (formerly Noname Security) provides comprehensive API discovery, posture management, an... 2 APIs 53.6 Axiom Axiom is a serverless log management and analytics platform that provides real-time insights into structure... 1 API 47.6 Axiom Controller Axiom is a cloud-native observability platform providing APIs for ingesting, querying, and managing telemet... 2 APIs 45.7 Apache Druid Apache Druid is a high-performance, real-time analytics database governed by the Apache Software Foundation... 1 API 45.6
Thin 5 Limited public surface area
US Cyber Command US Cyber Command (USCYBERCOM) is a Unified Combatant Command of the United States Armed Forces responsible ... 2 APIs 42.7 Anomaly Detection A curated collection of APIs, tools, and platforms for detecting anomalies in data streams, time series, an... 5 APIs 37.7 Chainguard Chainguard builds, secures, and maintains a catalog of hardened, minimal container images and software supp... 6 APIs 36.4 Amazon CloudShell AWS CloudShell is a browser-based terminal that enables users to manage and explore AWS resources directly ... 1 API 34.3 APIClarity APIClarity is an open source API security and observability tool that analyzes API traffic to reconstruct O... 1 API 34.1
Emerging 8 Early or largely undocumented
Abnormal Security Abnormal Security (operating under the abnormal.ai brand) is an AI-native email and SaaS security platform ... 1 API 27.5 Vectra AI Vectra AI is an AI-driven network detection and response (NDR) vendor whose Vectra AI Platform applies Atta... 1 API 27.5 Recorded Future Recorded Future is a threat intelligence platform whose Intelligence Cloud combines open-web, dark-web, tec... 1 API 26.8 Darktrace Darktrace builds the ActiveAI Security Platform, an AI-native cybersecurity platform powered by Self-Learni... 1 API 25.8 Expel Expel is a managed detection and response (MDR) provider that delivers 24x7 security operations across endp... 1 API 25.8 Adaptive Shield Adaptive Shield (now CrowdStrike Falcon Shield) is a SaaS Security Posture Management (SSPM) platform that ... 1 API 25.3 API Dynamics APIDynamics is an AI-driven API security and observability platform that empowers enterprises to gain real-... 1 API 23.9 Chief Information Officers Council The Chief Information Officers Council (CIOC) is the principal interagency forum for improving agency pract... 1 API 22.1

What Providers Actually Declared

This use case is a canonical term. These are the free-text strings providers wrote in their own apis.yml that map onto it.

API Security Posture AssessmentAPI Security Posture ManagementCloud Security MonitoringCloud Security Posture ManagementCloud Workload ProtectionCloud and Identity Threat DetectionCybersecurity Posture ImprovementCybersecurity and Threat DetectionCybersecurity and Threat IntelligenceIT and Security OperationsInsider Threat DetectionMalware DetectionNetwork and Security MonitoringNovel Threat DetectionReal-Time Threat DetectionSIEM IntegrationSaaS Security Posture ManagementSecurity AnalyticsSecurity MonitoringSecurity OperationsSecurity Posture AssessmentSecurity Posture HardeningSecurity Posture ManagementThreat DetectionThreat Detection and SecurityThreat HuntingThreat Hunting and OSINTThreat Intelligence EnrichmentVulnerability ManagementVulnerability Scanning Reduction

Scroll for all 30