# Security Signal Intelligence API

> Correlate security events, detect weak signals and attack sequences, surface insider-threat, privilege-escalation, lateral-movement, account-takeover, credential-abuse, and brute-force patterns, and score severity—using caller-supplied JSON events and logs with local explainable rules only.

- Product: https://www.brainiac.software/api/security-signals
- Docs: https://www.brainiac.software/api/security-signals/docs
- OpenAPI: https://www.brainiac.software/api/security-signals/openapi.json
- Contact: support@brainiac.software (https://www.brainiac.software/contact)

## Operations

- POST /api/v1/security-signals/event-correlate — $0.05 USDC — Correlate security events: Correlate caller-supplied security events into related incident groups using time windows and shared actor/host/IP links. Observed grouping only—not a confirmed attack. Docs: https://www.brainiac.software/api/security-signals/docs#security-signals-event-correlate
- POST /api/v1/security-signals/weak-signal-detect — $0.04 USDC — Detect weak security signals: Identify early suspicious-activity indicators from caller-supplied events. Weak signals are hypotheses with explicit confidence—not confirmed attacks. Docs: https://www.brainiac.software/api/security-signals/docs#security-signals-weak-signal-detect
- POST /api/v1/security-signals/attack-sequence-detect — $0.05 USDC — Detect attack sequences: Detect caller-supplied event sequences that match local attack-pattern rules. Matches are inferred patterns, not confirmed compromises. Docs: https://www.brainiac.software/api/security-signals/docs#security-signals-attack-sequence-detect
- POST /api/v1/security-signals/insider-threat-signal-detect — $0.05 USDC — Detect insider-threat signals: Identify unusual user activity in caller-supplied logs (off-hours, bulk/export wording, privilege changes). Not a confirmed insider attack. Docs: https://www.brainiac.software/api/security-signals/docs#security-signals-insider-threat-signal-detect
- POST /api/v1/security-signals/privilege-escalation-detect — $0.04 USDC — Detect privilege-escalation indicators: Detect privilege-escalation indicators from caller-supplied privilege fields and escalation keywords. Not confirmation of successful abuse. Docs: https://www.brainiac.software/api/security-signals/docs#security-signals-privilege-escalation-detect
- POST /api/v1/security-signals/lateral-movement-detect — $0.04 USDC — Detect lateral-movement indicators: Identify suspicious host-to-host movement from caller-supplied network/auth logs. Does not access the caller's network. Docs: https://www.brainiac.software/api/security-signals/docs#security-signals-lateral-movement-detect
- POST /api/v1/security-signals/account-takeover-signal-detect — $0.05 USDC — Detect account-takeover signals: Identify account-takeover indicators when multiple distinct signals appear for the same user (geo/device/MFA/recovery). Not a confirmed takeover. Docs: https://www.brainiac.software/api/security-signals/docs#security-signals-account-takeover-signal-detect
- POST /api/v1/security-signals/credential-abuse-detect — $0.04 USDC — Detect credential-abuse patterns: Detect suspicious credential usage such as repeated failures, fail-then-success, or reuse across many hosts from caller-supplied auth events. Docs: https://www.brainiac.software/api/security-signals/docs#security-signals-credential-abuse-detect
- POST /api/v1/security-signals/brute-force-pattern-detect — $0.04 USDC — Detect brute-force patterns: Identify burst, distributed, and low-and-slow brute-force patterns from caller-supplied authentication failures. Docs: https://www.brainiac.software/api/security-signals/docs#security-signals-brute-force-pattern-detect
- POST /api/v1/security-signals/event-severity-score — $0.05 USDC — Score security-event severity: Calculate an explainable severity score for detections derived from caller-supplied events, with scoring breakdown and confirmedAttack=false. Docs: https://www.brainiac.software/api/security-signals/docs#security-signals-event-severity-score