edgewatch

edgewatch

Edgewatch MCP Server

The Edgewatch MCP Server provides developers with programmatic access to two IP intelligence tools: getInsight, which delivers contextual analysis of an IP, and getExplorer, which lists observed hostnames and open ports. Access is authenticated via client credentials (client-id, client-secret), and the service supports both Streamable HTTP and SSE transports. SDK integration with schema validation (Zod) is recommended for safe request/response handling, while simple curl queries are also supported.

BreachSpot API

REST API application for credential search and breach data analysis. It provides comprehensive search capabilities across multiple data sources including Credshed, Twitter, and various breach incident collections. The API supports dual authentication systems for different client types and includes advanced…

Domain Intelligence API – Passive DNS

The Edgewatch Domain Intelligence API offers enriched passive DNS, RDAP, and infrastructure data to support threat detection, domain attribution, and cyber investigations. Track historical DNS records, registrar metadata, and name server relationships to uncover malicious activity and map global domain…

Breachspot

Edgewatch’s Breachspot continuously monitors public databases, online criminal forums, and data markets for compromised information. The data collected is enriched with context, and sensitive information —such as hashed passwords— can be decoded and indexed for further investigation. We group data…

Cyber Threat Intelligence

The Edgewatch CTI API provides real-time, first-hand cyber threat intelligence collected from a global honeypot network. It offers enriched data on IP addresses, domains, URLs, and malware hashes, supporting proactive threat detection, enrichment pipelines, and SOC integrations. Base URL: Authentication:All…

Edgewatch to Exhibit at GISEC Global 2025

Join Edgewatch at GISEC Global – May 23–25, 2025 | Dubai World Trade Centre | Booth H4-C31. Visit us to discover how Edgewatch delivers uncompromising security without third-party dependencies—all hosted entirely within Europe. Join us at GISEC to explore how true operational independence is shaping the future of cybersecurity.

Certificate Transparency Log API

The Certificate Transparency Log API enables proactive monitoring and auditing of SSL/TLS certificates issued for domain names. It helps verify proper issuance, spot misuse, and fortify web security by safeguarding online interactions and maintaining the trustworthiness of digital environments. The…

Insight API

The Edgewatch CVE Lookup API allows you to retrieve detailed information about IP addresses related to known vulnerabilities and exposures. This includes threat classifications, organizational data, geolocation, and more. The API is divided into two main endpoints: API Access The…