Use Case

Threat Detection & Security Operations

Detecting attacks and closing security exposure.

40 providers 1518 APIs 32 declared variants

Collecting security telemetry, correlating it against detection rules and threat intelligence, and running the vulnerability, posture, and hardening work a security operations team owns.

40 API providers on the APIs.io network offer threat detection & security operations. The highest-rated are Dynatrace, IPinfo, Amazon Neptune, Shodan, Microsoft Active Directory.

Providers

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 11 Complete, well-documented, and agent-ready
Dynatrace Dynatrace is a software intelligence platform that provides application performance monitoring, artificial ... 34 APIs 79.2 IPinfo IPinfo is an IP address data and intelligence platform that provides geolocation (country, region, city, co... 17 APIs 75.3 Amazon Neptune Amazon Neptune is a fast, reliable, fully managed graph database service that makes it easy to build and ru... 29 APIs 73.3 Shodan Shodan is the world's first search engine for Internet-connected devices. It continuously crawls the public... 15 APIs 73.3 Microsoft Active Directory Microsoft Active Directory and Microsoft Entra ID provide identity and access management for organizations ... 14 APIs 72.0 GreyNoise Intelligence GreyNoise Intelligence collects and analyzes Internet-wide scan and attack traffic from a global network of... 10 APIs 70.2 Datadog Datadog is a monitoring and analytics platform that helps organizations gain insight into their infrastruct... 290 APIs 69.9 AbuseIPDB AbuseIPDB is a community-driven project to help system administrators, webmasters, and security analysts ch... 4 APIs 69.6 Palo Alto Networks Palo Alto Networks is a global cybersecurity leader providing advanced security platforms and services acro... 789 APIs 67.7 Amazon Security Hub AWS Security Hub is a cloud security posture management service that provides a comprehensive view of your ... 5 APIs 67.2 CAST AI CAST AI is an Application Performance Automation (APA) platform for Kubernetes that automates cost optimiza... 17 APIs 66.3
Strong 9 Solid coverage with minor gaps
Varonis Varonis is a pioneer in data security and analytics, specializing in software for data security, governance... 6 APIs 65.7 Amazon GuardDuty Amazon GuardDuty is an intelligent threat detection service that continuously monitors your AWS accounts, w... 4 APIs 65.3 Amazon Kinesis Data Firehose Amazon Kinesis Data Firehose is the easiest way to reliably load streaming data into data lakes, data store... 1 API 65.2 Amazon IoT Device Defender AWS IoT Device Defender is a security service that lets you continuously audit your IoT configurations to d... 69 APIs 64.5 Google Workspace A collection of productivity and collaboration tools from Google including Gmail, Drive, Calendar, Meet, an... 29 APIs 63.7 Censys Censys is an internet intelligence and attack surface management platform that continuously scans the publi... 14 APIs 63.2 Amazon Security Lake Amazon Security Lake is a service that automatically centralizes an organization's security data from cloud... 3 APIs 59.9 Amazon CloudTrail AWS CloudTrail enables governance, compliance, operational auditing, and risk auditing of your AWS account ... 3 APIs 58.4 Amazon Detective Amazon Detective is a security investigation service that makes it easy to analyze, investigate, and quickl... 7 APIs 58.2
Developing 8 Usable, with meaningful gaps to close
AT&T Developer Hub The AT&T Developer Hub provides access to cutting-edge network APIs including 5G, edge computing, and CAMAR... 8 APIs 54.6 Axiom Axiom is a serverless log management and analytics platform that provides real-time insights into structure... 15 APIs 53.3 Akamai API Security Akamai API Security (formerly Noname Security) provides comprehensive API discovery, posture management, an... 65 APIs 51.4 Aqua Security Aqua Security provides cloud-native security for the full application lifecycle, protecting containers, ser... 8 APIs 51.4 AT&T AT&T Inc. is a multinational telecommunications holding company providing wireless and wireline communicati... 28 APIs 50.5 Axiom Controller Axiom is a cloud-native observability platform providing APIs for ingesting, querying, and managing telemet... 4 APIs 50.3 Anomaly Detection A curated collection of APIs, tools, and platforms for detecting anomalies in data streams, time series, an... 8 APIs 48.4 Apache Druid Apache Druid is a high-performance, real-time analytics database governed by the Apache Software Foundation... 1 API 46.9
Thin 4 Limited public surface area
US Cyber Command US Cyber Command (USCYBERCOM) is a Unified Combatant Command of the United States Armed Forces responsible ... 2 APIs 37.1 APIClarity APIClarity is an open source API security and observability tool that analyzes API traffic to reconstruct O... 4 APIs 36.6 Chainguard Chainguard builds, secures, and maintains a catalog of hardened, minimal container images and software supp... 6 APIs 34.1 Amazon CloudShell AWS CloudShell is a browser-based terminal that enables users to manage and explore AWS resources directly ... 1 API 31.9
Emerging 8 Early or largely undocumented
Abnormal Security Abnormal Security (operating under the abnormal.ai brand) is an AI-native email and SaaS security platform ... 1 API 25.1 Vectra AI Vectra AI is an AI-driven network detection and response (NDR) vendor whose Vectra AI Platform applies Atta... 1 API 25.1 Recorded Future Recorded Future is a threat intelligence platform whose Intelligence Cloud combines open-web, dark-web, tec... 1 API 24.4 Darktrace Darktrace builds the ActiveAI Security Platform, an AI-native cybersecurity platform powered by Self-Learni... 1 API 23.4 Expel Expel is a managed detection and response (MDR) provider that delivers 24x7 security operations across endp... 1 API 23.4 Adaptive Shield Adaptive Shield (now CrowdStrike Falcon Shield) is a SaaS Security Posture Management (SSPM) platform that ... 1 API 23.2 API Dynamics APIDynamics is an AI-driven API security and observability platform that empowers enterprises to gain real-... 1 API 21.9 Chief Information Officers Council The Chief Information Officers Council (CIOC) is the principal interagency forum for improving agency pract... 1 API 19.8

What Providers Actually Declared

This use case is a canonical term. These are the free-text strings providers wrote in their own apis.yml that map onto it.

API Security Posture AssessmentAPI Security Posture ManagementCloud Security MonitoringCloud Security PostureCloud Security Posture ManagementCloud Workload ProtectionCloud and Identity Threat DetectionCybersecurity Posture ImprovementCybersecurity and Threat DetectionCybersecurity and Threat IntelligenceIT and Security OperationsInsider Threat DetectionMalware DetectionNetwork and Security MonitoringNovel Threat DetectionReal-Time Threat DetectionSIEM IntegrationSaaS Security Posture ManagementSecurity AnalyticsSecurity MonitoringSecurity OperationsSecurity Posture AssessmentSecurity Posture HardeningSecurity Posture ManagementThreat DetectionThreat Detection and SecurityThreat HuntingThreat Hunting and OSINTThreat Intelligence EnrichmentThreat huntingVulnerability ManagementVulnerability Scanning Reduction

Scroll for all 32