Skip to main content
The feed endpoint lets you retrieve feed information, access their indicator collections, and understand the provenance of your threat intelligence data.

What Feeds Represent

Feeds represent curated collections of indicators sourced from third-party organizations, research projects, or automated intelligence pipelines. They provide context about where indicators come from and how they are grouped. Each feed includes metadata describing its purpose, the entity that maintains it, and the types of indicators it contains. Feeds are often used to:
  • Understand the origin of a group of indicators
  • Integrate upstream intelligence into internal workflows
  • Explore activity tracked by a specific project or provider
Feeds help clarify why a set of indicators exists and how it should be interpreted.

Feed Availability

The feeds you can access depend on your Pulsedive product:
  • Enterprise: Your organization’s administrators configure which feeds are available.
  • Community: The Pulsedive team maintains a curated set of feeds for all users.
Feed configuration is managed outside the API. The feed endpoint lets you discover and retrieve available feeds.

Retrieving a Feed

Retrieve a feed by its ID or by its name paired with the publishing organization. Both approaches return the feed’s core information, including descriptive details and high-level summaries of its indicator content. Retrieving a feed focuses on its metadata. Linked indicators can be retrieved separately to keep requests efficient and targeted.

Getting Linked Indicators

Feeds may contain a large number of indicators, and linked indicator retrieval allows you to access them when needed. This is helpful when:
  • Consuming curated intelligence streams
  • Reviewing activity tracked by a feed provider
  • Exploring relationships and patterns within the feed
Use linked indicators to access the detailed data behind the feed’s summary information.
The Pulsedive API automatically breaks large result sets into pages when you request linked indicators from threats or feeds. Free API users can access only the first page of results per request.