Skip to main content
The ContraForce Partner API provides programmatic access to incident data for integration with external systems.

Available Endpoints

EndpointDescription
List IncidentsRetrieve incidents across workspaces with filtering
Get Incident DetailsFull incident detail including entities and timeline
List Incident EntitiesAll entities associated with an incident
List Incident EvidenceSupporting evidence and artifacts

Common Use Cases

  • ITSM integration — Automatically create tickets in ServiceNow, ConnectWise, or Autotask when ContraForce detects an incident
  • SOAR enrichment — Feed ContraForce incident data into your SOAR platform
  • Custom dashboards — Pull incident metrics into BI tools
  • Reporting automation — Generate customer-facing reports from incident data

Getting Started

For API authentication, endpoints, request/response schemas, and code examples, see the API Documentation.