Assets Discovery

post

https://api.hudsonrock.com/json/v3/search-by-domain/discovery

Perform a discovery search to identify potential compromises.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Required Permissions

search-by-domain

Response Models (Schema)

url

Response Limits

Rate limit: 50 requests per 10 seconds
Maximum response per page: 1,000 URLs
Maximum response time: 90 seconds

📘
Results are sorted by occurrence in descending order.

Body Params

domains

array of strings

required

length between 1 and 500

List of domains to perform discovery on. Accepts root domains (example.com) and will match all subdomains. Between 1-500 domains can be specified per request. For large organizations, consider batching domains across multiple requests.

domains*

types

array of strings

Defaults to employees,users

Types of compromises to discover. 'employees' finds corporate email credentials (@company.com), while 'users' finds consumer credentials. Default includes both types for comprehensive discovery.

types

Allowed:

cursor

string

Base64 encoded pagination cursor for retrieving the next set of results. Obtained from the 'nextCursor' field in the previous response. Essential for processing large discovery results that span multiple pages.

keywords

array of strings

Optional keywords to narrow discovery results to specific services or applications. Examples include ['vpn', 'admin', 'portal'] for critical infrastructure or ['salesforce', 'workday', 'office365'] for SaaS applications.

keywords

keywords_match

string

enum

Determines how multiple keywords are matched during discovery. 'any' returns results matching at least one keyword (broader discovery), while 'all' requires all keywords to match (targeted discovery for specific services).

Allowed:

Responses

Language

Credentials

Header

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

Required Permissions

Response Models (Schema)

Response Limits

Results are sorted by occurrence in descending order.

200Successful discovery

400Validation error - the request or request body was invalid

401Unauthorized - the server could not authenticate the request

403Forbidden - the server authenticated the request but refuses to process it because of insufficient permissions

404Not found - the server could not find the requested resource

408Timeout - the server timed out while waiting for a response (90 seconds)

429Rate limit exceeded - the server has received too many requests in a short period of time

500Internal server error - the server encountered an unexpected condition that prevented it from fulfilling the request

Results are sorted by `occurrence` in descending order.