Developer API

Security intelligence
for developers & agents

Breach detection, SIM swap monitoring, infostealer exposure, and domain lookalike scanning — REST API, metered billing, no commitments.

Enter your email to get started. You'll be redirected to a secure checkout to save a card. Your API key arrives by email instantly.

Metered billing · No monthly minimum · Cancel anytime

Endpoints & pricing
Pay only for what you use. Billed monthly via Stripe.
/v1/metered/breach
$0.10 / call
Email breach check via HIBP — name, date, data classes exposed
/v1/metered/sim-swap
$0.25 / call
SIM swap detection via Twilio Lookup v2 — carrier + swap timestamp
/v1/metered/infostealer
$0.50 / call
Infostealer log check — stolen credentials, malware path, at-risk services
/v1/metered/domain
$0.30 / call
Typosquat domain scan — active lookalikes via DNS + cert transparency
/v1/metered/oauth-watchlist
$0.20 / call
OAuth supply chain check — 31 watched apps, breach exposure detection
/v1/metered/crypto-intel
$0.30 / call
Asset surface — wallet address risk, token honeypot & tax flags, counterparty screening
Threat Intelligence API NEW

On-demand IOC lookup against RelayShield's live Telegram-sourced criminal channel intelligence — 24–72 hours ahead of public breach databases. Emails, domains, phone numbers, and wallet addresses matched in real time against infostealer log markets, credential dump channels, and SIM swap service listings.

MSP — $499/mo MSSP — $999/mo
Calls / month 10,000 Unlimited
IOC types Email · Phone · Domain · Wallet
Intel sources 31 criminal Telegram channels (infostealer, credential dumps, SIM swap, crypto drainers)
Lead time vs HIBP 24–72 hours
Rate limit ~333 calls/day None
Support Standard email Priority + SLA
Best for SOC teams, SOAR playbooks, incident response MSSPs with continuous multi-client monitoring
/v1/intel/telegram
$499 / mo
MSP tier — up to 10,000 IOC queries/month. Embed in SOAR playbooks, SIEM enrichment, or incident response workflows.
Subscribe — $499/mo
/v1/intel/telegram
$999 / mo
MSSP volume tier — unlimited calls, priority support + SLA. For MSSPs running continuous monitoring across multiple client environments.
Subscribe — $999/mo
Quick start
# Breach check
curl -X POST https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/metered/breach \
  -H "X-RS-API-KEY: rs_live_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{"email": "user@example.com"}'

# Response
{
  "ok": true,
  "data": {
    "email": "user@example.com",
    "breach_count": 3,
    "breaches": [{ "name": "LinkedIn", "breach_date": "2021-06-22", ... }]
  }
}