Cloud API

Integration Without Complication

Built by developers, for developers. Our RESTful APIs deliver real-time URL scanning, file sandboxing, email validation, and threat intelligence — all with JSON responses, SSL encryption, and sub-second latency.

Free Trial Access 99.9% Uptime SLA 24/7 Support
scan_url.py
import requests

response = requests.post(
    "https://api.sorbsecurity.com/v1/scan/url",
    headers={"Authorization": "Bearer YOUR_API_KEY"},
    json={"url": "https://example.com/login"}
)

result = response.json()
# {"verdict": "malicious", "score": 95, "category": "phishing"}

Four Powerful APIs, One Platform

Real-time cloud APIs for URL scanning, file sandboxing, email validation, and threat intelligence — each returning structured JSON with sub-second response times.

URL Scan API

Real-time link analysis

Submit any URL for instant threat analysis. Returns verdict, risk score, threat category, and full page metadata. Detects phishing, malware distribution, and credential harvesting sites.

POST /v1/scan/url < 500ms View Docs →

Sandbox API

Cloud file detonation

Upload files or attachments for cloud-based detonation and behavioral analysis. Supports 200+ file types including Office docs, PDFs, executables, and archives. Returns IOCs and full analysis reports.

POST /v1/scan/file 200+ file types View Docs →

Email Validation API

Sender & header verification

Validate email addresses, verify sender reputation, and check DMARC/DKIM/SPF alignment. Identify disposable domains, catch-all mailboxes, and compromised accounts in real-time.

POST /v1/validate/email DMARC/DKIM/SPF

Threat Intel API

Global threat feeds

Query our global threat intelligence database for IP reputation, domain history, and IOC enrichment. Ingest batch feeds for SIEM correlation. Continuously updated from millions of real-world sources.

GET /v1/intel/lookup Batch & Real-time

Developer-First Experience

Everything you need to integrate in minutes, not weeks. Sample code, clear documentation, and predictable JSON responses across every endpoint.

Sample Code Included

Ready-to-run examples in Python, Java, C#, .NET, PHP, Perl, Bash, and more. Copy, paste, and go.

SSL Encrypted

All API traffic is encrypted end-to-end with TLS. API keys managed through a secure developer portal.

Real-Time JSON

Clean, structured JSON responses. No XML parsing, no SOAP wrappers. RESTful endpoints that behave exactly as expected.

Batch & Streaming

Process single requests or submit bulk queries. Both real-time and batch modes available for high-volume use cases.

Clear Documentation

Interactive API reference with request/response examples, error codes, and rate limit guidance for every endpoint.

Free Trial

Try before you buy. Get a free API key with generous rate limits to evaluate our APIs in your environment.

Works With Your Stack

Our APIs plug directly into the security platforms you already use. Native integrations for email gateways, proxies, and SIEMs.

Cisco IronPort

WSA & SEG

Proofpoint

ESP Integration

TrendMicro

Email & Proxy

Bluecoat Proxy

Web Gateway

Splunk

SIEM Integration

Rapid7

SIEM Integration

Microsoft 365

Native API

Google Workspace

Native API

99.9%

Uptime SLA

<500ms

Avg Response Time

8+

Language SDKs

24/7

Developer Support

Start Building in Minutes

Get a free API key, explore sample code in your language, and integrate SorbSecurity threat intelligence into your security stack today.