API REFERENCE

QuickSecure REST API

The QuickSecure REST API enables organizations to integrate endpoint security, threat intelligence, incident response and behavioral analytics into existing security workflows. Every endpoint, alert and remediation action available through the platform can also be managed programmatically through secure API endpoints.

API Overview

The REST API is designed around modern HTTP standards and returns structured JSON responses for every request. Security teams can retrieve endpoint information, monitor live detections, automate investigations and trigger response actions without interacting directly with the management console.

All communication is encrypted using HTTPS. Authentication tokens protect every request while role-based permissions ensure that applications only access authorized resources.

Authentication

Every API request requires authentication before data is returned. Administrators generate API keys directly from the Corxor management console. These keys identify the calling application and determine which resources are accessible.

Authentication tokens should always be stored securely and rotated regularly. Long-lived credentials should never be embedded directly inside applications or exposed in public repositories.

Best Practice

Use short-lived tokens whenever possible and integrate authentication with your organization's secret management solution.

Available API Resources

The platform exposes multiple REST endpoints covering endpoint inventory, detections, incidents, response actions, policy management, users, reports and threat intelligence.

Endpoint Inventory
Behavioral Detections
Threat Intelligence
Incident Timeline
Autonomous Response
Security Policies
User Management
Audit Logs

Webhook Events

Corxor supports webhook integrations that notify external systems whenever important security events occur. Instead of polling the API continuously, applications can receive real-time notifications about detections, endpoint status changes and incident updates.

Threat Detected
Endpoint Isolated
Rollback Completed
Policy Updated
User Login Activity
Incident Closed

Response Format

All API responses are returned in JSON format. Successful requests include requested resources together with metadata, timestamps and unique identifiers that simplify automation and integration.

                    {
                    "status":"success",
                    "endpoint":"PC-024",
                    "risk":"High",
                    "behavior":"Ransomware Activity",
                    "action":"Endpoint Isolated",
                    "timestamp":"2025-01-18T15:30:18Z"
                    }

                

Rate Limiting

To maintain platform availability, API requests are subject to configurable rate limits. Applications exceeding these limits receive temporary HTTP 429 responses and should retry using exponential backoff.

Enterprise deployments may configure custom rate limits according to organizational requirements.

SDK Support

Official SDKs simplify integration with the QuickSecure platform by providing reusable authentication, request handling and error management components.

Python SDK
Java SDK
.NET SDK
JavaScript SDK
Go SDK

Integration Tip

SDKs automatically manage authentication tokens, pagination and secure HTTPS communication, reducing the amount of custom integration code required.

Security Recommendations

API credentials should always be protected using secure secret management solutions. Access permissions should follow the principle of least privilege, granting applications only the permissions required for their intended functions.

Rotate API keys regularly.
Use HTTPS for every request.
Never expose credentials in source code.
Enable audit logging.
Restrict API permissions by role.
Monitor authentication failures.

Security Notice

API access provides direct interaction with protected endpoints and security policies. Compromised credentials may allow unauthorized operations if proper access controls are not enforced.

Integration Examples

Organizations commonly integrate the Corxor REST API with SIEM platforms, SOAR workflows, ticketing systems, cloud infrastructure and custom security dashboards.

Automated integrations reduce investigation time while enabling rapid incident response across enterprise environments.

Best Practices

Authenticate every request securely.
Validate all API responses.
Implement retry logic for transient failures.
Monitor API usage through audit logs.
Store credentials securely.
Keep SDK versions updated.

Summary

The QuickSecure REST API enables secure integration with enterprise security ecosystems. Through standardized JSON responses, secure authentication and real-time webhook events, organizations can automate endpoint protection, incident response and operational reporting while maintaining enterprise-grade security.

Back to Documentation