---
title: "Resolve a product name to watchable identities (no CPE knowledge needed)."
method: GET
path: "/surveillance/catalog/products"
tags: ["surveillance"]
---

# Resolve a product name to watchable identities (no CPE knowledge needed).

`GET /surveillance/catalog/products`

## Request

- Base URL: `https://api.ismalicious.com`
- URL: `https://api.ismalicious.com/surveillance/catalog/products`
- Auth: one of:
  - API key in header `X-API-KEY`
  - HTTP bearer
  - HTTP basic

## Query parameters

- `q` string

## Response `200`

OK

- ProductSuggestionsResponse
  - `items` ProductSuggestion[], required
    - `cpeProduct` string, nullable
    - `cpeVendor` string, nullable
    - `cveCount` integer, nullable
    - `ecosystem` string, nullable
    - `identityKey` string, required
    - `name` string, required
    - `packageName` string, nullable

## Other responses

- `400`: Invalid request
- `401`: Unauthorized

## Changes

- **2026-10-23** `7c8ce9039cf7`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/surveillance/catalog/products/get.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) - [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/b6f45e6169a7?raw)