Threat Watch
ThreatWatch Intelligence API delivers real-time cyber threat intelligence for security teams, SOC analysts, and developers building security-aware applications. Access curated threat feeds, IOC utilities, detection recommendations, and comprehensive threat actor intelligence through a single, unified API. Why ThreatWatch? Security teams spend countless hours aggregating threat data from multiple…
Threat Watch endpoints
| Method | Endpoint | Description |
|---|---|---|
| Health | ||
| GET |
/status /status |
Returns detailed status of all API components |
| GET |
/health /health |
Returns API health status and uptime |
| Feeds | ||
| GET |
/feed-sector /feed-sector |
Returns threat intelligence for a specific sector |
| GET |
/feed-daily /feed-daily |
Returns today's threat intelligence bulletin |
| GET |
/feed-weekly /feed-weekly |
Returns the current week's consolidated intelligence |
| Intel | ||
| GET |
/intel-actor /intel-actor |
|
| GET |
/intel-search /intel-search |
Search across actors, malware, campaigns, advisories, and IOCs |
| GET |
/intel-campaign /intel-campaign |
|
| GET |
/intel-malware /intel-malware |
|
| IOC | ||
| POST |
/ioc-enrich /ioc-enrich |
|
| POST |
/ioc-normalize /ioc-normalize |
Extract and normalize IOCs from unstructured text |
| POST |
/ioc-match /ioc-match |
|
| Detection | ||
| GET |
/ttp /ttp |
|
| GET |
/playbooks /playbooks |
|
| POST |
/detection-recommend /detection-recommend |
|
| Workspace | ||
| GET |
/workspace-iocs /workspace-iocs |
|
| GET |
/workspace-advisories /workspace-advisories |
|
| POST |
/workspace-iocs /workspace-iocs |
|
| POST |
/workspace-advisories /workspace-advisories |
|
Threat Watch pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | — |
|
| PRO | $29 / month | — |
|
| ULTRA | $99 / month | — |
|
| MEGA | $499 / month | — |
|