Obstracts Logo
REST API

REST API

Use the Obstracts REST API to build custom integrations, enrich internal workflows, and move structured intelligence into the tools your team already uses.

Overview

The Obstracts REST API is the most flexible way to integrate Obstracts into your environment.

It gives teams direct access to structured intelligence derived from public reporting, making it easier to build custom tooling, support analyst workflows, and connect Obstracts to the rest of the stack.

Why teams use the REST API

The REST API is a strong fit when you want more control over how Obstracts data is used.

That can include:

  • building internal search or enrichment tools
  • pulling structured intelligence into analyst dashboards
  • surfacing related public intelligence inside case or incident workflows
  • correlating Obstracts data with internal detections or sightings
  • supporting AI agents with structured CTI inputs

Because Obstracts is STIX 2.1 native, the data is already structured in a way that is more useful for downstream systems than raw reporting text.

Example use cases

  • Create a lookup service that takes an IoC and returns related Obstracts reports and extracted objects.
  • Enrich a triage workflow with external ATT&CK, malware, or infrastructure context.
  • Build an internal research portal that lets analysts search trusted-source intelligence alongside internal data.
  • Feed structured public intelligence into an automation or agent workflow.

When to choose REST API

Choose the REST API when you want a custom workflow, application, or integration that is shaped around your own environment.

If you want a more standards-based sharing model, the TAXII API may be a better fit.

Explore next