Sign in

v1

latestOpenAPI 3.0.0Proprietary - Commercial Use Only2026-08-06172139621.6 KB
Risk Intelligence

Searches through the leaks.

Create a search operation for leaks. This endpoint will not return the list of resulting leaks, but instead it will return a search key, that can be used to list the leaks found by using getLeaks operation.  Attention: Every unique client id can create a maximum of 100000 search key per day.  Attention: All array type search criteria may take a maximum of 100000 values each.

post/api/v2/riskintelligence/leaks/search

Request body

GenericSearchTextstring

A generic search text which will be searched over many of the leak fields.

LeakIdsnumber[] nullable

The list of leak ids

EcosystemIdsnumber[] nullable

The list of ecosystem ids that the companies are defined under.

LeakTypesstring[] nullable

The list of leak types.

PasswordTypesstring[] nullable

The list of password types.

SourceTypesstring[] nullable

The list of source types.

ThreatActorsstring[] nullable

The list of threat actors.

LeakNamestring

The name of the leak.

LeakSourceDomainstring

The source domain of the leak.

CurrentExposureGreaterThannumber

The value of minimum current exposure of the leak. 0 means all findings.

CurrentExposureLessThannumber

The value of maximum current exposure of the leak. 0 means all findings.

FreshnessRateGreaterThannumber

The value of minimum freshness rate of the leak. 0 means all findings.

FreshnessRateLessThannumber

The value of maximum freshness rate of the leak. 100 means all findings.

UniqueEmailAccountCountGreaterThannumber

The value of minimum unique email account count of the leak. 0 means all findings.

UniqueEmailAccountCountLessThannumber

The value of maximum unique email account count of the leak. 0 means all findings.

TotalCountGreaterThannumber

The value of minimum total count of the leak. 0 means all findings.

TotalCountLessThannumber

The value of maximum total count of the leak. 0 means all findings.

PublishDateFromstring datetime

The earliest date on which the leak was published.

PublishDateTostring datetime

The latest date on which the leak was published.

Example request

{
  "GenericSearchText": "Oracle",
  "LeakTypes": [
    "combolist"
  ],
  "PasswordTypes": [
    "plain"
  ],
  "SourceTypes": [
    "forum"
  ],
  "ThreatActors": [
    "CyberData"
  ],
  "LeakName": "(BREACH%20FORUM)(COMBOLIST)-3427748-20240106",
  "LeakSourceDomain": "blabla.com",
  "PublishDateFrom": "2021-04-01",
  "PublishDateTo": "2024-04-01"
}

Response

Success

Keystring required

A key in GUID format, which points to the newly created leaks of vulnerability search action. Use this key in getLeaks action as a URL parameter in order to fetch the results. The key has a life time of 6 hours. A new search operation should be performed when the search keys are expired.

Example response

{
  "Key": "0f8fad5b-d9cb-469f-a165-70867728950e"
}