The Email Security.cloud Data Feeds API is a REST interface that offers Advanced Threat Protection: Email customers comprehensive actionable threat intelligence data on all of the email that Email Security.cloud scans. Using this nearly real-time data, you can provide reporting and dashboards across the multiple services that your clients use. The extracted data is returned in JSON format, and is stored for 7 days. You can feed the data into your SIEM so that it can be integrated with other security-related data and used for your security monitoring requirements.
You enable access to the data feed by checking a box in the Email Security Services portal. The portal also provides a downloadable sample script and Email Security.cloud Data Feeds API Guide: Email Advanced Threat Protection to help you get started quickly. The portal supplies only the English-language version of the Data Feeds API Guide. Versions of the guide for all other languages supported by the Email Security.cloud portal are attached to this page.