The Email Security.cloud Data Feeds API is an HTTP interface that offers Advanced Threat Protection: Email and Email Threat Isolation customers comprehensive actionable threat intelligence data on all of the email that Email Security.cloud scans. Though this HTTP interface is not a REST API, it is similar to one in that it has no functional state maintained on the server.
Using this nearly real-time data, you can provide reporting and dashboards across the multiple services that your clients use. The extracted data is returned in JSON format, and is stored for 7 days. You can feed the data into your SIEM so that it can be integrated with other security-related data and used for your security monitoring requirements.
This version of the Data Feeds API includes metadata elements for the Advanced Threat Protection: Email, URL Isolation, Click-time URL Protection, and Anti-Spam services and features.