Skip to main content
The broader event-intelligence layer is separate from the asset-linked threat feed. Use it when you need:
  • map overlays
  • country rollups
  • tile-based rendering
  • point inspection
  • background event search near monitored assets

​
Core endpoints

  • GET /v1/events — filtered event search
  • GET /v1/events/at-point — inspect co-located events
  • GET /v1/events/country-counts — choropleth summary
  • GET /v1/events/heatmap-points — lightweight heatmap payload
  • GET /v1/events/tiles/{z}/{x}/{y}.pbf — vector tiles

​
Why both threats and events exist

  • Threats are evaluated, tenant-scoped, operational objects
  • Events are the broader intelligence substrate used for discovery and map products