Free API trial
POST an alert. Read back the reasoning.
The self-serve path, for people who would rather evaluate a product than sit through a presentation about one. Get a key, send an alert as JSON, and read the disposition, the confidence and the written reasoning that produced them.
curl -X POST https://api.intruex.com/v1/alerts \
-H "Authorization: Bearer intruex_sk_..." \
-H "Content-Type: application/json" \
-d '{
"event_type" : "brute_force_success",
"severity" : "high",
"source" : "acme-siem",
"observed_at" : "2026-08-29T08:41:02Z",
"entities": {
"user" : "svc_backup",
"src_ip" : "203.0.113.44",
"dest_host" : "SRV-DC02"
}
}'
{
"alert_id" : "ALT-88214",
"analyst" : "brute_force",
"disposition" : "escalate",
"confidence" : 0.71,
"reasoning" : "Successful authentication for a service
account from an external address with no
prior sighting in this environment. The
account authenticates from two internal
hosts historically and from nothing else.",
"enrichment" : [ ... ],
"next" : "tier_2_investigation_queued"
}
What you get
A scoped API key, a trial allowance of alerts, and the full decision record on each one.
What we get
Your email address. There is no sequence attached to it and no sales development representative waiting.
What it costs
Nothing, and no card. Evaluate it on your own alerts, on your own schedule.
Request a trial key
Keys are issued within one business day, by a person who will also help you shape your first payload.
Bring us an alert you already know the answer to
Hand it something from last week and read the reasoning. If the verdict is wrong, you will see exactly where it went wrong, which is the whole point.