Crowd Threat API · Live

verified threat data, straight into your systems

A REST API to the Crowd Threat feed: real-time, human-sourced incidents from a global network of local reporters. Every record arrives the moment it's reported, with its verification status and confidence attached.

Commercial licence includedResell the feed to your own clients, inside your own platform.
GET /v1/threats/:idIllustrative
{
  "id": "thr_270367360612",
  "status": "unverified",
  "confidence": "emerging",
  "title": "Silver Toyota Prius Stolen, Los Angeles",
  "category": {
    "domain": "Crime & Safety",
    "type": "Property Crime",
    "subtype": "Theft"
  },
  "location": {
    "address": "633 S Spring St, Los Angeles, CA",
    "lat": 34.0466,
    "lng": -118.2487,
    "precision_m": 250
  },
  "timeline": {
    "occurred_at": "2026-02-05T20:06:00Z",
    "reported_at": "2026-02-05T20:28:41Z",
    "verified_at": null
  },
  "source_url": "https://…"
}
◆ Illustrative response. Field names and structure shown for reference only.
Commercial licence included

sell our data to your own clients

Every API plan comes with a commercial licence. Build Crowd Threat data into your own platform and sell it on to your client base, as part of your product and under your brand. You get a verified global reporter network without building one.

With every API planCommercial use

Resell to your own clients

Sell Crowd Threat data on to your customer base as part of your own product or service.

Build it into your platform

Put the feed inside your maps, alerts, reports and models, under your own brand.

Grow your revenue, not your costs

Add verified, human-sourced threat data without building or paying for a collection network.

One consistent global standard

Every incident in every country follows the same taxonomy and verification process.

◆ Licence terms are set out in your API agreement.

See it in action

see the api in action

Who it's for

built for the platforms your clients already use

If your platform tells clients what's happening in the world, the Crowd Threat feed makes it faster, more local and more complete.

Big data and analytics platforms

Add a structured, timestamped event layer to your data products and models.

Travel risk platforms

Alert travellers and duty-of-care teams to incidents near their route, hotel or meeting.

Threat intelligence platforms

Enrich your feeds with on-the-ground reporting that open sources miss.

Investigative and due diligence platforms

Give investigators local incident history for any place, person or asset they look into.

Security operations and GSOC tools

Put verified incidents on the screens your clients' security teams already watch.

Insurance and underwriting platforms

Feed exposure, accumulation and claims tools with consistent incident data.

Supply chain and logistics risk

Flag disruption near ports, routes, suppliers and warehouses as it happens.

Mapping and geospatial platforms

Layer precise, geolocated incidents onto your maps for every user.

Building something else? Tell us about your platform and we'll show you how the feed fits.

16,000+

threat reports in September 2026

76%

of reports live within 2 hours of onset

200+

vetted reporters in a global network

17

countries our reporters are based in

What's in every record

structured, consistent, ready to use

Every incident follows the same structure and the same taxonomy, wherever in the world it's reported. No cleaning, no reconciling sources that disagree.

"status"

Verification status

Unverified, Verified or Rejected, updated live as our analysts review each report.

"confidence"

Confidence

Emerging, Medium or High, based on the reporter's track record and accuracy.

"category"

Three-level taxonomy

Domain, type and subtype, so every incident is filed the same way in every country.

"location"

Precise location

Address, latitude and longitude, with a precision radius in metres.

"timeline"

Full timeline

When it happened, when it was reported and when it was verified.

"source_url"

Source

The original source behind the report, so your team can check it themselves.

Verification and confidence

act early, then weight it as it's confirmed

Incidents reach the API as soon as they're submitted, with no wait for review. Each record tells you how far it has been checked and how much to trust it.

Verification status · live on every record

UnverifiedVerifiedRejected

Status changes are pushed by webhook, so your systems update the moment an analyst confirms or rejects a report.

Confidence · from the reporter's track record

EmergingNew reporter, unproven track record
MediumConsistent accuracy over time
HighExperienced reporter, strong verification rate
01

Reported

Live in the API the moment a reporter submits it

02

AI triage

Title, category, summary, location and timeline checked

03

Analyst review

A human in the loop confirms the assessment

04

Verified

Or rejected, with the status change pushed to you

AI makes us fast; experienced analysts make us accurate. Every report keeps a human in the loop before it's marked verified.

For developers

a simple REST API, with webhooks

Query the feed by status, place, time and category, or let us push new incidents and status changes to you.

GET/threatsall incidents, filtered by status, place and time
GET/threats/:ida single incident
GET/threats?bbox=…bounding box or radius query
POST/webhookspush new incidents and status changes
StatusUnverified, verified or rejected, so you choose how early to act.
PlaceCountry, bounding box or a radius around your sites.
TimeAny window, from the last hour to months of history.
CategoryAny domain, type or subtype in the taxonomy.
Pricing

one plan, full access, licence included

£80,000/year
Save £19,996 · paid up front

Full REST API access to the verified global threat feed, with a commercial licence to build it into your platform and sell it on.

  • Commercial licence to resell to your own clients
  • Full API access to the real-time global feed
  • Webhooks for new incidents and status changes
  • Filter by status, place, time and category
Get an API Key

Other ways to access the same data

Not sure which is right for you? Book a 15-minute call and we'll recommend the best fit.

FAQ

common questions

put verified ground truth inside your platform

Get API access to the Crowd Threat feed, with a commercial licence to sell it on to your own clients.

◆ Crowd Threatwire · Discord

Join our open OSINT community.

Open to anyone interested in OSINT. Some areas are reserved for verified Crowd Threat reporters.

Join the Discord
◆ SSEA 2026 FINALIST
◆ MARKET DISRUPTOR OF THE YEAR
REGISTERED IN ENGLAND & WALES · CO. NO. 15880372
©2026 Crowd Threat Limited. All rights reserved.
Registered in England & Wales · Company No. 15880372 · VAT No. GB495919525 · Privacy · Terms