IOC Enrichment API

Enrich indicators of compromise — IP addresses, domains, URLs, file hashes, and email addresses — against multiple threat intelligence providers to assess reputation and known malicious associations.

Enrich Indicators

POST3/indicator

Enrich up to 10 indicators of compromise per request against 14 threat intelligence providers. Returns per-provider verdicts, aggregated scores, and a summary classification (malicious, suspicious, clean, or unknown).