Use Case
Threat Detection & Security Operations
Detecting attacks and closing security exposure.
38 providers
614 APIs
30 declared variants
Collecting security telemetry, correlating it against detection rules and threat intelligence, and running the vulnerability, posture, and hardening work a security operations team owns.
38 API providers on the APIs.io network offer threat detection & security operations. The highest-rated are Dynatrace, Datadog, Amazon Security Lake, Amazon Neptune, Palo Alto Networks.
Providers
Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.
Exemplar 6 Complete, well-documented, and agent-ready
DynatraceDynatrace is a software intelligence platform that provides application performance monitoring, artificial ...DatadogDatadog is a monitoring and analytics platform that helps organizations gain insight into their infrastruct...Amazon Security LakeAmazon Security Lake is a service that automatically centralizes an organization's security data from cloud...Amazon NeptuneAmazon Neptune is a fast, reliable, fully managed graph database service that makes it easy to build and ru...Palo Alto NetworksPalo Alto Networks is a global cybersecurity leader providing advanced security platforms and services acro...Recorded FutureRecorded Future is a threat intelligence platform whose Intelligence Cloud combines open-web, dark-web, tec...
Strong 11 Solid coverage with minor gaps
Amazon CloudTrailAWS CloudTrail enables governance, compliance, operational auditing, and risk auditing of your AWS account ...CensysCensys is an internet intelligence and attack surface management platform that continuously scans the publi...Amazon GuardDutyAmazon GuardDuty is an intelligent threat detection service that continuously monitors your AWS accounts, w...Microsoft Active DirectoryMicrosoft Active Directory and Microsoft Entra ID provide identity and access management for organizations ...ShodanShodan is the world's first search engine for Internet-connected devices. It continuously crawls the public...IPinfoIPinfo is an IP address data and intelligence platform that provides geolocation (country, region, city, co...Google WorkspaceA collection of productivity and collaboration tools from Google including Gmail, Drive, Calendar, Meet, an...Amazon IoT Device DefenderAWS IoT Device Defender is a security service that lets you continuously audit your IoT configurations to d...Amazon Kinesis Data FirehoseAmazon Kinesis Data Firehose is the easiest way to reliably load streaming data into data lakes, data store...GreyNoise IntelligenceGreyNoise Intelligence collects and analyzes Internet-wide scan and attack traffic from a global network of...Amazon DetectiveAmazon Detective is a security investigation service that makes it easy to analyze, investigate, and quickl...
Developing 7 Usable, with meaningful gaps to close
Anomaly DetectionA curated collection of APIs, tools, and platforms for detecting anomalies in data streams, time series, an...AxiomAxiom is a serverless log management and analytics platform that provides real-time insights into structure...AbuseIPDBAbuseIPDB is a community-driven project to help system administrators, webmasters, and security analysts ch...AT&TAT&T Inc. is a multinational telecommunications holding company providing wireless and wireline communicati...CAST AICAST AI is an Application Performance Automation (APA) platform for Kubernetes that automates cost optimiza...Aqua SecurityAqua Security provides cloud-native security for the full application lifecycle, protecting containers, ser...AT&T Developer HubThe AT&T Developer Hub provides access to cutting-edge network APIs including 5G, edge computing, and CAMAR...
Thin 7 Limited public surface area
Apache DruidApache Druid is a high-performance, real-time analytics database governed by the Apache Software Foundation...VaronisVaronis is a pioneer in data security and analytics, specializing in software for data security, governance...Amazon CloudShellAWS CloudShell is a browser-based terminal that enables users to manage and explore AWS resources directly ...Axiom ControllerAxiom is a cloud-native observability platform providing APIs for ingesting, querying, and managing telemet...Akamai API SecurityAkamai API Security (formerly Noname Security) provides comprehensive API discovery, posture management, an...APIClarityAPIClarity is an open source (Apache-2.0) API security and observability tool that captures API traffic in ...Adaptive ShieldAdaptive Shield (now CrowdStrike Falcon Shield) is a SaaS Security Posture Management (SSPM) platform that ...
Emerging 7 Early or largely undocumented
ChainguardChainguard builds, secures, and maintains a catalog of hardened, minimal container images and software supp...US Cyber CommandUS Cyber Command (USCYBERCOM) is a Unified Combatant Command of the United States Armed Forces responsible ...API DynamicsAPIDynamics is an AI-driven API security and observability platform that empowers enterprises to gain real-...ExpelExpel is a managed detection and response (MDR) provider that delivers 24x7 security operations across endp...Abnormal SecurityAbnormal Security (operating under the abnormal.ai brand) is an AI-native email and SaaS security platform ...DarktraceDarktrace builds the ActiveAI Security Platform, an AI-native cybersecurity platform powered by Self-Learni...Chief Information Officers CouncilThe Chief Information Officers Council (CIOC) is the principal interagency forum for improving agency pract...
What Providers Actually Declared
This use case is a canonical term. These are the free-text strings
providers wrote in their own apis.yml that map onto it.
API Security Posture AssessmentAPI Security Posture ManagementCloud Security MonitoringCloud Security PostureCloud Workload ProtectionCybersecurity Posture ImprovementCybersecurity and Threat DetectionCybersecurity and Threat IntelligenceIT and Security OperationsInsider Threat DetectionMalware DetectionNetwork and Security MonitoringNovel Threat DetectionReal-Time Threat DetectionSIEM IntegrationSaaS Security Posture ManagementSecurity AnalyticsSecurity MonitoringSecurity OperationsSecurity Posture AssessmentSecurity Posture HardeningSecurity Posture ManagementThreat DetectionThreat Detection and SecurityThreat HuntingThreat Hunting and OSINTThreat Intelligence EnrichmentThreat huntingVulnerability ManagementVulnerability Scanning Reduction
Scroll for all 30
Work with this as data
Every use case here is available over the APIs.io API and to AI agents over MCP. Use Cases is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.