API Reference

Retrieve published articles with pagination, category and date filters. Returns public editorial content only.

Retrieve a single article by ID. Returns title, body excerpt, category, tags and publish date.

Query CVE records with severity, vendor and date filters. Scores and descriptions only — no exploit code.

Responses include CVSS scores and vendor advisories only. No exploit payloads, proof-of-concept code or raw vulnerability details are exposed.

Retrieve threat intelligence summaries. Redacted and safe for enterprise consumption — no raw IOC data.

All threat intelligence responses are editorially reviewed and redacted. No raw IOC hashes, C2 addresses or dark web content is returned.

Full-text search across articles, CVEs and threat intelligence. Results are entitlement-filtered.

Request a CSV or JSON export of query results. Exports are entitlement-gated and redacted.

Export content is filtered by plan entitlements. No sensitive raw data or dark web content is included in exports.

Retrieve current account details, plan info and usage summary.

Retrieve saved vendor and product watchlists for the authenticated account.

Retrieve threat actor profiles with type, region and sector filters. All profiles are fictional and editorially reviewed.

All threat actor profiles are fictional. No real operational details, tooling specifics or attribution to real groups is provided.

Retrieve a single threat actor profile by ID. Includes aliases, TTPs and related campaigns.

Fictional threat actor for educational and defensive analysis only. No real group identities or operational capabilities are disclosed.

Retrieve ransomware group summaries. No real victim data, leak site links or operational instructions included.

All ransomware data is fictional. No real victim identities, ransom amounts, leak site URLs or negotiation details are exposed.

Retrieve vendor risk assessments based on CVE exposure, patch cadence and threat actor targeting. Scores are mock samples.

Retrieve configured custom intelligence feeds. Feeds aggregate data from multiple API products with per-tenant filters.

Preview a custom feed configuration before saving. Returns sample output based on the provided filters and categories.

Preview output is redacted and content-filtered. No raw IOC data or dark web content is included in previews.

Retrieve API version history and changelog entries. Includes added, changed, deprecated and security entries.

Check API service health and current version. No authentication required.