security-apis

A collective list of public JSON APIs for use in security. https://alexanderjaeger.de

Index

API	Description	Auth	HTTPS	Link	Free / Commercial
Alexa	Alexa Top Sites	`apiKey`	Yes	Link!	?
Bluecoat Site Review	URL Analysis	`none`	Yes	Link!	Free
censys.io	Free for Researchers Threat Intel	`apiKey`	Yes	Link!	?
Certly	Certly Guard	`apiKey`	Yes	Link!	?
CIRCL CVE Search	CVE Search	`apiKey`	Yes	Link!	Free
CrowdStrike API	TI	`apiKey`	Yes	[Link!](https://www.crowdstrike.com/blog/tech-center/get-access-crowdstrike-apis/
)	NO
Cymon.io	Open Threat Intel	`apiKey`	Yes	Link!	?
Domaintools	Comercial Threat Intel	`apiKey`	Yes	Link!	Commercial
DShield	Internet Storm Center API	`apiKey`	Yes	Link!	Free
emergingthreats.net	Domain / IP intelligence and reputation	`apiKey`	Yes	Link!	?
Farsight DNSDB Passive DNS	Passive DNS and more	`apiKey`	Yes	Link!	?
Fireeye iSight	Comercial Threat Intel	`apiKey`	Yes	Link!	Commercial
FIRST.org	Incident Response Teams API	`none`	Yes	Link!	?
Hybrid Analysis	Online Sandbox	`none`	Yes	Link!	Free
Malwr.com	Malware analysis	`apiKey`	Yes	Link!	?
MAlshare	Malware Sharing	`apiKey`	Yes	Link!	?
Mac Vendor Lookup	Threat Intel	`apiKey`	Yes	Link!	?
MaxMind	GeoIP and More	`apiKey`	Yes	Link!	?
Passive Total	Threat Intel	`apiKey`	Yes	Link!	?
Qualys SSLLabs	Test SSL and more	`apiKey`	Yes	Link!	?
Spamhaus	Domain / IP intelligence and reputation	`?`	Yes	Link!	?
Team Cymru	Threat Intel	`apiKey`	Yes	Link!	Both
VirusTotal	VirusTotal File/URL Analysis	`apiKey`	Yes	Link!	?
Zoomeye	CVE Search	`apiKey`	Yes	Link!	?

API	Description	Auth	HTTPS	Link	Free / Commercial
Carbon Black	Endpoint Security	`apiKey`	Yes	Link!	Commercial
Cuckoo	Cuckoo Sandbox	`apiKey`	Yes	Link!	OpenSource
CRITS	TI System	`apiKey`	Yes	Link!	?
CrowdStrike falcon-orchestrator	Orchestrator	`apiKey`	Yes	Link!	yes
Cymetria Maze Runner	-	`apiKey`	Yes	Link!	?
FireEye	Endpoint Security	`apiKey`	Yes	Link!	?
GRR	Endpoint Incident Response tool	`apiKey`	Yes	Link!	OpenSource
Carbon Black	Endpoint Security	`apiKey`	Yes	Link!	Commercial
MISP	Open Source Threat Intelligence Platform	`apiKey`	Yes	Link!	OpenSource
Metadefender	MultiAV	`apiKey`	Yes	Link!	Commercial
OTRS	Open Ticket Relay System	`apiKey`	Yes	Link!	?
Recorded Future	Threat Intelligence Platform	`apiKey`	Yes	Link!	?
TheHive	TI System	`apiKey`	Yes	Link!	Free
Viper.li	Viper malware repository API	`None`	No	Link!	OpenSource
VMRay	VMRay Sandbox	`apiKey`	Yes	Link!	?

API	Description	Auth	HTTPS	Link	Free / Commercial
ArcSight	HP ArcSight API	`None`	No	Link!	Commercial
ELK	ELK Stack API	`None`	No	Link!	OpenSource
QRadar	IBM QRadar API	`None`	No	Link!	Commercial
Splunk	Splunk API	`None`	No	Link!	Commercial

API	Description	Auth	HTTPS	Link	Free / Commercial
AlienVault Open Threat Exchange (OTX)	IP/domain/URL reputation	`apiKey`	Yes	Link!	?
Certly	Certly Link/Domain Flagging	`apiKey`	Yes	Link!	?
Cisco ISE	ISE is an identity and access control policy platform	`apiKey`	Yes	Link!	?
Cisco PXGrid	Cisco Platform Exchange Grid	`apiKey`	Yes	Link!	?
Cisco Security APIs	Cisco Developer Page	``	?	Link!	?
Cisco Umbrella	Cisco Umbrella Enforcement API	`apiKey`	Yes	Link!	?
Cyphon	Open Source INcident Management tool	`apiKey`	Yes	Link!	?
Google Safe Browsing	Google Link/Domain Flagging	`apiKey`	Yes	Link!	?
Metacert	Metacert Link Flagging	`apiKey`	Yes	Link!	?
RSA Secure ID	Metacert Link Flagging	`apiKey`	Yes	Link!	?
Web Of Trust (WOT)	Website reputation	`apiKey`	Yes	Link!	?