---
title: "Get anonymised threat intelligence trends"
method: GET
path: "/api/v1/intelligence/trends"
tags: ["Threat Intelligence"]
---

# Get anonymised threat intelligence trends

`GET /api/v1/intelligence/trends`

## Request

- Base URL: `https://api.tuteliq.ai`
- URL: `https://api.tuteliq.ai/api/v1/intelligence/trends`
- Auth: one of:
  - HTTP bearer
  - API key in header `x-api-key`

Returns aggregated, anonymised detection trends across all customers. Includes breakdowns by endpoint, category, age group, platform, and language. All data is k-anonymised — buckets with fewer than 5 signals are suppressed. No PII or customer-identifiable information is ever included.

## Query parameters

- `days` string
- `endpoint` string
- `age_group` string
- `platform` string

## Response `200`

Default Response

- object
  - `period` object
    - `start` string
    - `end` string
  - `total_signals` number
  - `trends_by_endpoint` object[]
  - `trends_by_category` object[]
  - `trends_by_age_group` object[]
  - `trends_by_platform` object[]
  - `emerging_threats` object[]
  - `geographic_trends` object[]

---

[API](https://skmtc.dev/tuteliq/apis/tuteliq-api.md) · [All operations](https://skmtc.dev/tuteliq/apis/tuteliq-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tuteliq/apis/tuteliq-api/revisions/8490332e0031?raw)