Security News Search

POSThttps://api.deepinfo.com/v1/cti/news/search

Searches curated cybersecurity news.

Example

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/cti/news/search?page_size=25' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{}'

Python

import requests

url = "https://api.deepinfo.com/v1/cti/news/search"

params = {
    "page_size": "25"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/cti/news/search?page_size=25";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({}),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/cti/news/search?page_size=25", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/cti/news/search?page_size=25"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString("{}"))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/cti/news/search?page_size=25");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent("{}", Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/cti/news/search?page_size=25',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => '{}',
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/cti/news/search?page_size=25')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = '{}'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "page": 1,
  "page_size": 25,
  "result_count": 21,
  "results": [
    {
      "id": "000000000000000ecf240001",
      "title": "Phishing campaign targets online retailers",
      "image": "https://platform-storage.example/images/acme.png",
      "source": "Kestrel Security Blog",
      "source_url": "https://www.acme.example/",
      "publish_date": "2025-06-01T08:00:00Z",
      "tags": [
        "production",
        "staging"
      ],
      "country": [],
      "industry": [],
      "organization": [],
      "cve_vendor": [
        "acme"
      ],
      "cve_product": [
        "acme-portal"
      ],
      "cve_id": [
        "CVE-0000-0001",
        "CVE-0000-0002"
      ],
      "featured": true,
      "threat_actor": [],
      "related_issue_types": []
    },
    {
      "id": "000000000000000ecf240002",
      "title": "Ransomware group claims attack on logistics firm",
      "image": "https://platform-storage.example/images/acme-2.png",
      "source": "Fernhill Threat Report",
      "source_url": "https://app.fernhill.example/",
      "publish_date": "2025-05-25T08:00:00Z",
      "tags": [
        "production-2",
        "staging-2"
      ],
      "country": [],
      "industry": [
        "Manufacturing"
      ],
      "organization": [],
      "cve_vendor": [],
      "cve_product": [],
      "cve_id": [],
      "featured": true,
      "threat_actor": [
        "Phishing crew"
      ],
      "related_issue_types": []
    }
  ]
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/cti/news/search?page=0' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{}'

Python

import requests

url = "https://api.deepinfo.com/v1/cti/news/search"

params = {
    "page": "0"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/cti/news/search?page=0";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({}),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/cti/news/search?page=0", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/cti/news/search?page=0"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString("{}"))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/cti/news/search?page=0");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent("{}", Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/cti/news/search?page=0',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => '{}',
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/cti/news/search?page=0')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = '{}'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

400 Bad Request · application/json

Response Body

{
  "code": 10400,
  "parameters": [
    {
      "param": "page",
      "details": [
        "Ensure this value is greater than or equal to 1."
      ]
    }
  ],
  "solution": "https://docs.deepinfo.com/reference/"
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/cti/news/search?page_size=25' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "filters": {
    "must": [
      {
        "name": "title",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "source",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "tags",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "country",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "industry",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "organization",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve_vendor",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve_product",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve_id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "threat_actor",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "related_issue_types",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "featured",
        "type": "eq",
        "value": true
      },
      {
        "name": "publish_date",
        "type": "eq",
        "value": "<date-time>"
      }
    ]
  },
  "sort": [
    {
      "field": "title",
      "order": "desc"
    }
  ]
}'

Python

import requests

url = "https://api.deepinfo.com/v1/cti/news/search"

params = {
    "page_size": "25"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {
    "filters": {
        "must": [
            {
                "name": "title",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "source",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "tags",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "country",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "industry",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "organization",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve_vendor",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve_product",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "cve_id",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "threat_actor",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "related_issue_types",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "featured",
                "type": "eq",
                "value": True
            },
            {
                "name": "publish_date",
                "type": "eq",
                "value": "<date-time>"
            }
        ]
    },
    "sort": [
        {
            "field": "title",
            "order": "desc"
        }
    ]
}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/cti/news/search?page_size=25";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    filters: {
      must: [
        {
          name: "title",
          type: "eq",
          value: "<value>"
        },
        {
          name: "source",
          type: "eq",
          value: "<value>"
        },
        {
          name: "tags",
          type: "eq",
          value: "<value>"
        },
        {
          name: "country",
          type: "eq",
          value: "<value>"
        },
        {
          name: "industry",
          type: "eq",
          value: "<value>"
        },
        {
          name: "organization",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve_vendor",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve_product",
          type: "eq",
          value: "<value>"
        },
        {
          name: "cve_id",
          type: "eq",
          value: "<value>"
        },
        {
          name: "threat_actor",
          type: "eq",
          value: "<value>"
        },
        {
          name: "related_issue_types",
          type: "eq",
          value: "<value>"
        },
        {
          name: "featured",
          type: "eq",
          value: true
        },
        {
          name: "publish_date",
          type: "eq",
          value: "<date-time>"
        }
      ]
    },
    sort: [
      {
        field: "title",
        order: "desc"
      }
    ]
  }),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{
  "filters": {
    "must": [
      {
        "name": "title",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "source",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "tags",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "country",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "industry",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "organization",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve_vendor",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve_product",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve_id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "threat_actor",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "related_issue_types",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "featured",
        "type": "eq",
        "value": true
      },
      {
        "name": "publish_date",
        "type": "eq",
        "value": "<date-time>"
      }
    ]
  },
  "sort": [
    {
      "field": "title",
      "order": "desc"
    }
  ]
}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/cti/news/search?page_size=25", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        String body = """
            {
              "filters": {
                "must": [
                  {
                    "name": "title",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "source",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "tags",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "country",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "industry",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "organization",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve_vendor",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve_product",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "cve_id",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "threat_actor",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "related_issue_types",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "featured",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "publish_date",
                    "type": "eq",
                    "value": "<date-time>"
                  }
                ]
              },
              "sort": [
                {
                  "field": "title",
                  "order": "desc"
                }
              ]
            }""";

        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/cti/news/search?page_size=25"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(body))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var body = """
    {
      "filters": {
        "must": [
          {
            "name": "title",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "source",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "tags",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "country",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "industry",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "organization",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve_vendor",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve_product",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "cve_id",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "threat_actor",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "related_issue_types",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "featured",
            "type": "eq",
            "value": true
          },
          {
            "name": "publish_date",
            "type": "eq",
            "value": "<date-time>"
          }
        ]
      },
      "sort": [
        {
          "field": "title",
          "order": "desc"
        }
      ]
    }
    """;

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/cti/news/search?page_size=25");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent(body, Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$body = <<<'JSON'
{
  "filters": {
    "must": [
      {
        "name": "title",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "source",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "tags",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "country",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "industry",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "organization",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve_vendor",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve_product",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "cve_id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "threat_actor",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "related_issue_types",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "featured",
        "type": "eq",
        "value": true
      },
      {
        "name": "publish_date",
        "type": "eq",
        "value": "<date-time>"
      }
    ]
  },
  "sort": [
    {
      "field": "title",
      "order": "desc"
    }
  ]
}
JSON;

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/cti/news/search?page_size=25',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => $body,
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/cti/news/search?page_size=25')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = <<~'JSON'.chomp
  {
    "filters": {
      "must": [
        {
          "name": "title",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "source",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "tags",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "country",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "industry",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "organization",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve_vendor",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve_product",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "cve_id",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "threat_actor",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "related_issue_types",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "featured",
          "type": "eq",
          "value": true
        },
        {
          "name": "publish_date",
          "type": "eq",
          "value": "<date-time>"
        }
      ]
    },
    "sort": [
      {
        "field": "title",
        "order": "desc"
      }
    ]
  }
JSON

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

This request template has no response: keep the filters you need, set their values and send it.

Authentication

Send your API key in the apikey request header.

Query Parameters

Parameter	Required	Description
`page_size`	Optional	Min `25`, max `100`. Default `100`. Example`25`
`page`	Optional	Min `1`, max `800`. Default `1`. Example`1`

Request Body

Parameter	Type	Required	Description
`filters`	object	Optional	See Filtering below
`sort`	array	Optional	List of `{field, order}`

application/json

{}

Filtering

Example body:

JSON

{
  "filters": {
    "must": [
      {
        "name": "title",
        "type": "eq",
        "value": "<value>"
      }
    ]
  },
  "sort": [
    {
      "field": "title",
      "order": "desc"
    }
  ]
}

See Getting Started → Search & Filters for the operators.

The Request Template example holds this body with every filter of this endpoint, one entry per field, each with an operator the field accepts and a placeholder value. Copy it, keep the filters you need and set their values.

Searchable Fields

Grouped by the operators they accept (measured against the API; sending another operator returns 400).

Operators eq in startswith endswith contains_any contains_all exists

Field	Description
`title`	The article's headline; the platform's news search box matches words in it.
`source`	The publisher of the article, such as `Bleeping Computer`, `The Hacker News` or `Security Affairs`; a few records hold the article's address instead.
`tags`	Topic tags of the article, in lower case with hyphens, such as `zero-day`, `active-exploitation` or `cisa`; they are the tag chips on the article cards.
`country`	Countries the article names as targets (TARGET COUNTRY), as English country names such as `Germany` rather than codes.
`industry`	Industries the article names as targets (TARGET INDUSTRY), as sector names such as `Education` or `Financial and Insurance Activities`.
`organization`	Organizations the article names as targets (TARGET ORGANIZATION).
`cve_vendor`	Vendor names linked to the CVEs in the article (VENDOR), in lower case with underscores, such as `microsoft` or `fortinet`.
`cve_product`	Product names linked to the CVEs in the article (PRODUCT), usually in lower case with underscores, such as `chrome` or `linux_kernel`.
`cve_id`	CVE IDs mentioned in the article, such as `CVE-2025-59718` (CVE in the article's side panel).
`threat_actor`	Threat actors the article names (THREAT ACTOR), such as `ShinyHunters`.
`related_issue_types`	Issue types the article is linked to, as a list of strings; empty on every article in the samples.

Operators eq exists

Field	Description
`featured`	Boolean flag for featured articles; `false` on every article in the samples.

Operators eq in gte lte exists

Field	Description
`publish_date`	When the article was published (UTC date-time); the news menu groups articles by it under TODAY and LAST 7 DAYS.

Sortable Fields

Field	Description
`title`	The article's headline; the platform's news search box matches words in it.
`source`	The publisher of the article, such as `Bleeping Computer`, `The Hacker News` or `Security Affairs`; a few records hold the article's address instead.
`publish_date`	When the article was published (UTC date-time); the news menu groups articles by it under TODAY and LAST 7 DAYS.
`tags`	Topic tags of the article, in lower case with hyphens, such as `zero-day`, `active-exploitation` or `cisa`; they are the tag chips on the article cards.
`country`	Countries the article names as targets (TARGET COUNTRY), as English country names such as `Germany` rather than codes.
`industry`	Industries the article names as targets (TARGET INDUSTRY), as sector names such as `Education` or `Financial and Insurance Activities`.
`organization`	Organizations the article names as targets (TARGET ORGANIZATION).
`cve_vendor`	Vendor names linked to the CVEs in the article (VENDOR), in lower case with underscores, such as `microsoft` or `fortinet`.
`cve_product`	Product names linked to the CVEs in the article (PRODUCT), usually in lower case with underscores, such as `chrome` or `linux_kernel`.
`cve_id`	CVE IDs mentioned in the article, such as `CVE-2025-59718` (CVE in the article's side panel).
`featured`	Boolean flag for featured articles; `false` on every article in the samples.
`threat_actor`	Threat actors the article names (THREAT ACTOR), such as `ShinyHunters`.
`related_issue_types`	Issue types the article is linked to, as a list of strings; empty on every article in the samples.

Response Fields

Field	Type	Description
`page`	integer
`page_size`	integer
`result_count`	integer
`results`	array of object
`results[].id`	string
`results[].title`	string
`results[].image`	string
`results[].source`	string
`results[].source_url`	string
`results[].publish_date`	string	date-time
`results[].tags`	array of string
`results[].country`	array of string
`results[].industry`	array of string
`results[].organization`	array of string
`results[].cve_vendor`	array of string
`results[].cve_product`	array of string
`results[].cve_id`	array of string
`results[].featured`	boolean
`results[].threat_actor`	array of string
`results[].related_issue_types`	array of string

Paginated. See Getting Started → Pagination.

Response Schema

Inferred from examples Built from the saved 2xx example response: the fields it contains, with the types seen there. It is not a contract.

Field	Type	Example
`page`	number	`1`
`page_size`	number	`25`
`result_count`	number	`21`
`results`	array<object>
`results[].id`	string	`"000000000000000ecf240001"`
`results[].title`	string	`"Phishing campaign targets online re…"`
`results[].image`	string	`"https://platform-storage.example/im…"`
`results[].source`	string	`"Kestrel Security Blog"`
`results[].source_url`	string	`"https://www.acme.example/"`
`results[].publish_date`	string	`"2025-06-01T08:00:00Z"`
`results[].tags`	array<string>	`"production"`
`results[].country`	array
`results[].industry`	array<string>	`"Manufacturing"`
`results[].organization`	array
`results[].cve_vendor`	array<string>	`"acme"`
`results[].cve_product`	array<string>	`"acme-portal"`
`results[].cve_id`	array<string>	`"CVE-0000-0001"`
`results[].featured`	boolean	`true`
`results[].threat_actor`	array<string>	`"Phishing crew"`
`results[].related_issue_types`	array

Examples

Selecting one loads it into the request and response panels.

Reference updated September 27, 2026