Sign in
Domain Intelligence

Assets Discovery

Perform a discovery search to identify potential compromises.

post/search-by-domain/discovery

Request body

domainsstring[] required

List of domains to perform discovery on. Accepts root domains (example.com) and will match all subdomains. Between 1-500 domains can be specified per request. For large organizations, consider batching domains across multiple requests.

typesstring[]

Types of compromises to discover. 'employees' finds corporate email credentials (@company.com), while 'users' finds consumer credentials. Default includes both types for comprehensive discovery.

cursorstring

Base64 encoded pagination cursor for retrieving the next set of results. Obtained from the 'nextCursor' field in the previous response. Essential for processing large discovery results that span multiple pages.

keywordsstring[]

Optional keywords to narrow discovery results to specific services or applications. Examples include ['vpn', 'admin', 'portal'] for critical infrastructure or ['salesforce', 'workday', 'office365'] for SaaS applications.

keywords_match'any' | 'all'

Determines how multiple keywords are matched during discovery. 'any' returns results matching at least one keyword (broader discovery), while 'all' requires all keywords to match (targeted discovery for specific services).

Example request

{
  "domains": [
    "hpe.com"
  ],
  "keywords_match": "any"
}

Response

Successful discovery

nextCursorstring

Cursor for the next page of results

Changes

No recorded changes to this endpoint across all 1 revision of this API.