Custom Feed

Custom Feed API

Build custom intelligence feeds that aggregate data from multiple API products with per-tenant filters and output formats. STIX/TAXII formats are planned.

Safety level: Restricted. All responses are editorially reviewed, redacted and safe for enterprise consumption. No raw IOC data, dark web content, exploit code or stolen credentials.

Example use cases

•Consolidated threat feed for SIEM ingestion
•Executive daily briefing automation
•Sector-specific alerting pipelines
•Custom indicator feeds for detection engineering

Endpoints

GET/api/v1/custom-feeds

List Custom Feeds

Custom Feeds · Professional

POST/api/v1/custom-feeds/preview

Preview Custom Feed

Custom Feeds · Professional

Custom Feed Response

Custom intelligence feed configuration with categories, filters and output format.

id*

Feed identifier

string

name*

Feed name

string

categories*

Included product categories

string[]

format*

Output format: json, csv, stix, taxii_mock

string

itemCount*

Current item count in feed

number

{ "id": "cf-001", "name": "Critical CVE Feed", "categories": "[\"cve\"]", "format": "json", "itemCount": "42" }

Safety notes

• Feed content is filtered by plan entitlements and safety policies.

• STIX and TAXII formats are planned — not currently implemented.

• All feed output is redacted and content-safe.