Threat intelligence API / Reference / Monitoring

Monitoring endpoints

Your company name and domains, and the leak-site postings that name them. Analyst and up. Analyst and up.

GET /monitoring/company · PUT /monitoring/company · GET /monitoring/company/threats

GET /monitoring/company

Your monitored company name and domains · 1 credit per call

curl -H "X-API-Key: $TC_KEY" \
  "https://threatcluster.io/api/public/v1/monitoring/company"

PUT /monitoring/company

Set the company name and domains to watch on leak sites · 1 credit per call

Request body · CompanyMonitoringUpdate

FieldTypeMeaning
company_namestring or null
domainsarray or nullDomains to watch on ransomware leak sites. Organisation accounts may list several (up to their cap); personal accounts one.
curl -H "X-API-Key: $TC_KEY" -X PUT \
  "https://threatcluster.io/api/public/v1/monitoring/company"

GET /monitoring/company/threats

Leak-site victim postings naming your company or domains · 3 credits per call

curl -H "X-API-Key: $TC_KEY" \
  "https://threatcluster.io/api/public/v1/monitoring/company/threats"