Threat intelligence

Enrich up to 100 indicators in one call

Built for SIEM log-enrichment pipelines. Submit up to 100 indicators of any type and get malware family, threat actor, confidence and first/last seen for each. Priced per batch, not per indicator.

Billing. $0.50 per successful call. Failed calls are never billed. Charged against prepaid credits when the balance covers it, otherwise metered to your card. Threat Intelligence subscribers and AWS Marketplace bundle customers call this at no extra charge.

Note. A single indicator whose lookup fails is returned with matched: false and error: query_failed rather than failing the batch.

post/v1/metered/bulk-ioc

Request

  • Base URL: https://api.relayshield.net
  • URL: https://api.relayshield.net/v1/metered/bulk-ioc
  • Auth: one of:
    • API key in header X-RS-API-KEY
    • HTTP bearer

Request body

iocsstring[] required

1 to 100 indicators. Values are lowercased and trimmed; empty entries are dropped.

Response

Success. ok is true and data holds the result.

oktrue required

Changes

No recorded changes to this operation across all 1 revision of this API.