---
title: "Searches through monitored companies."
method: POST
path: "/api/v2/companies/search"
tags: ["Company"]
---

# Searches through monitored companies.

`POST /api/v2/companies/search`

Create a search operation for companies. This endpoint will not return the list of resulting companies, but instead it will return a search key, that can be used to list the companies found by using getCompanies operation. 
 **Attention:** Every unique client id can create a maximum of 100000 search key per day. 
 **Attention:** All array type search criteria may take a maximum of 100000 values each.

## Request body

- object
  - `GenericSearchText` string — A generic search text which will be searched over many of the companies' fields, such as company name, domains, industry codes, etc.
  - `EcosystemIds` number[], nullable — The list of ecosystem ids that the companies are defined under.
  - `IndustryIds` number[], nullable — The list of industry ids that the companies are classified with.
  - `CountryCodes` string[], nullable — The list of countries that the companies belong to in two letters format.
  - `TagIds` number[], nullable — The list of tag ids that the companies are attributed with.
  - `ProductGroupIds` number[], nullable — The list of product group ids that the companies products are defined under.
  - `LicenseTypes` string[], nullable — The list of license type.
  - `LicenseStatus` string[], nullable — The list of license status.
  - `GradeLetters` string[], nullable — The list of grade letters that the companies have as a technical risk score.
  - `ControlCodes` string[], nullable — The list of Black Kite security controls that the company has a finding of.
  - `CveOrCweCodes` string[], nullable — The list of CVE or CWE codes that the company has a finding of.
  - `ThreatActorIds` number[], nullable — The list of threat actor ids.
  - `LeakIds` number[], nullable — The list of leak ids.
  - `TagConfidences` string[], nullable — The confidence levels of tags
  - `HasCriticalVuln` boolean — Whether the company contains at least one critical finding. That means a finding with CWSS score > 8 or CVSS > 8.
  - `HasLeakIn90Days` boolean — Whether the company has breached credentials in the last 90 days.
  - `HasPoorSsl` boolean — Whether the company broken crypto algorithms, such as SSL v2.0, SSL v3.0 or TLS v1.0.
  - `HasPoorDdos` boolean — Whether the company has a DDOS Black Kite grade with smaller than or equal to C.
  - `HasPoorSmtp` boolean — Whether the company has a Email Security Black Kite grade with smaller than or equal to C.
  - `HasPoorDns` boolean — Whether the company has a DNS Black Kite grade with smaller than or equal to C.
  - `CwssCvssBiggerThanValue` number, double — The value of minimum CWSS or CVSS of the company findings. Supports decimal values (e.g., 8.99). 0 means all findings.
  - `CompanySizeGreaterThan` number, nullable — The value of minimum company size.
  - `CompanySizeLessThan` number, nullable — The value of maximum company size.
  - `CountryRiskRatings` string[], nullable — The list of country risk ratings to filter companies by.
  - `NumberOfEmployeeGreaterThan` number, nullable — The value of minimum number of employee.
  - `NumberOfEmployeeLessThan` number, nullable — The value of maximum number of employee.
  - `IsInOfac` boolean — Whether the company is listed in OFAC (Office of Foreign Assets Control) sanctions list.
  - `RevenueGreaterThan` number, nullable — The value of minimum revenue.
  - `RevenueLessThan` number, nullable — The value of maximum revenue.
  - `NetIncomeGreaterThan` number, nullable — The value of minimum net income.
  - `NetIncomeLessThan` number, nullable — The value of maximum net income.
  - `OperatingIncomeGreaterThan` number, nullable — The value of minimum operating income.
  - `OperatingIncomeLessThan` number, nullable — The value of maximum operating income.
  - `EquityGreaterThan` number, nullable — The value of minimum equity.
  - `EquityLessThan` number, nullable — The value of maximum equity.
  - `UseGenAIs` string[], nullable — The list of Gen AI usage to filter companies by.

## Response `200`

Success

- object
  - `Key` string, required — A key in GUID format, which points to the newly created company search action. Use this key in getCompanies action as a URL parameter in order to fetch the results. The key has a life time of 6 hours. A new search operation should be performed when the search keys are expired.

## Other responses

- `400` — BadRequest
- `401` — Unauthorized
- `default` — Failure

---

[API](https://skmtc.net/blackkitetech/apis/black-kite-api.md) · [All operations](https://skmtc.net/blackkitetech/apis/black-kite-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/blackkitetech/black-kite-api/revisions/7dadaba760fb/schema)