# Exabeam

> Exabeam delivers faster, more accurate threat detection, investigation, and response (TDIR) through an AI-driven security operations platform combining cloud-native SIEM, user and entity behavioral analytics (UEBA), log management, correlation and detection rules, and automated investigation. Exabeam exposes a REST API surface via developers.exabeam.com, served from eight regional gateway hosts on the exabeam.cloud domain and secured with OAuth2.

This llms.txt was generated by the API Evangelist enrichment pipeline from the API Evangelist catalog and probed artifacts (the provider publishes no /llms.txt of its own; the ReadMe hub reports llms_txt disabled).

## Developer

- [Developer Hub](https://developers.exabeam.com): ReadMe-hosted developer portal
- [API Reference](https://developers.exabeam.com/exabeam/reference): REST API reference for all Exabeam APIs
- [Documentation / Guides](https://developers.exabeam.com/exabeam/docs): platform and API guides
- [Getting Started / API Keys](https://developers.exabeam.com/exabeam/docs/api-keys): create API key + secret, authenticate with OAuth2
- [Changelog](https://developers.exabeam.com/changelog): dated API changelog
- [Community Forums](https://mycommunity.exabeam.com/category/forums): developer and product community
- [MCP Server guide](https://developers.exabeam.com/exabeam/docs): official Exabeam MCP server for agents

## APIs

Base URLs are regional: https://api.{us-west,us-east,eu,au,sg,jp,ca,ch}.exabeam.cloud

- Access Control API — manage users, roles, and permissions
- Audit API — retrieve audit-trail and activity-log records
- Authentication API — OAuth2 token issuance (POST /oauth/token) and API key auth
- Cloud Collectors API — manage cloud log collectors
- Context Management API — manage context tables and enrichment data
- Correlation Rules API — create and manage correlation rules
- Detection Management API — manage detection rules and content
- MITRE ATT&CK API — MITRE ATT&CK technique/tactic mappings
- Search API — search ingested log and event data
- Service Health and Consumption API — service health and data-consumption metrics
- Site Collectors API — manage on-premises / site log collectors
- Threat Center API — manage cases, alerts, and investigations
- Use Cases API — manage security use cases and detection content

## Authentication

- OAuth2 bearer tokens; API Key + Secret generated in the console (Settings > API Keys)
- Token endpoint: https://api.{region}.exabeam.cloud/oauth/token
- Authorization-server metadata (RFC 8414): https://api.us-west.exabeam.cloud/.well-known/oauth-authorization-server
- Scopes: openid, profile, offline_access
- Authentication API rate limit: 50 requests per 5 minutes per client source IP

## Security & Trust

- [Trust Center](https://exabeam.securitypal.com/): SOC 2 Type 2, ISO 27001/27017/27018, PCI DSS, HIPAA, GDPR, CCPA, IRAP, Cyber Essentials, TRUSTe
- [Status Page](https://exabeam.statuspage.io/): platform status
- [Privacy Policy](https://www.exabeam.com/legal/privacy-policy/)
- [Terms and Conditions](https://www.exabeam.com/legal/terms-and-conditions/)

## Company

- [Website](https://www.exabeam.com): AI-driven security operations platform
- [Blog](https://www.exabeam.com/blog/)
- [GitHub](https://github.com/Exabeam)