API Reference

Programmatic access to threat intelligence and incident management.

GET /v1/threats/active

Returns a list of currently active threats detected against your monitored assets.

POST /v1/incidents/trigger

Manually trigger an incident response playbook. Requires SCOPE:WRITE permissions.