Build on GPU-Native Security Intelligence
Integrate NVIDIA RAPIDS analytics, Triton Inference Server, and NIM-powered autonomous agents into your security stack with Python SDK, Go SDK, gRPC streaming, Terraform provider, and Helm charts.
Stream Events, Trigger Agents, Get Results
# Install the Quellra SDKpip install quellra # Configure and start monitoringfrom quellra import StreamClient, AgentPipeline # Real-time event stream with confidence thresholdstream = StreamClient(api_key="qr_...")async for event in stream.subscribe(confidence_threshold=0.85): print(f"Threat detected: {event.type} | Confidence: {event.confidence}") # Trigger autonomous investigation pipeline investigation = await AgentPipeline.investigate( event_id=event.id, agents=["correlation", "attack_chain", "blast_radius", "report"], auto_respond=True # Autonomous containment ) print(f"Investigation: {investigation.summary}") print(f"MITRE ATT&CK: {investigation.mitre_tactics}")Every Interface You Need
REST, GraphQL, WebSockets, CLI, and native SDKs — choose the integration path that fits your workflow.
Quellra Stream API
Real-time event ingestion and detection results. WebSocket and gRPC streaming for high-throughput telemetry. Filter by confidence threshold, severity, or source.
Agent Pipeline API
Trigger NIM-powered autonomous investigations. Chain correlation, attack-chain, blast-radius, and report agents. Structured JSON reports with MITRE ATT&CK mappings.
Threat Intelligence API
IOC lookups, MITRE ATT&CK mappings, cuGraph-powered attack-chain visualization. Query historical threat data with RAPIDS cuDF for sub-second responses on TB-scale datasets.
Huntix Query API
Natural language threat hunting queries compiled to RAPIDS GPU execution. Ask 'processes that loaded LSASS within 30 minutes of external connections, past 90 days' — get results in 4 minutes (vs 5 hours on CPU).
Webhook & Event API
Real-time alerts, agent actions, and detection events delivered to your infrastructure. Cryptographically signed webhooks with configurable filters and automatic retries.
REST & gRPC APIs
Comprehensive RESTful endpoints (OpenAPI 3.1 spec) for threat data, agent management, and compliance reporting. High-throughput gRPC streaming for real-time telemetry ingestion.
Natural Language Threat Hunting on GPU
Ask complex threat-hunting questions in plain English. Quellra compiles your query to RAPIDS cuDF and executes on GPU — 75× faster than Spark/CPU.
Comprehensive API Coverage
60+ endpoints across real-time streaming, agent orchestration, threat intelligence, natural language hunting, attack-chain visualization, and SIEM integrations.
Designed for Developer Productivity
Python SDK (pip install quellra)
Type-annotated async client. StreamClient for real-time events, AgentPipeline for autonomous investigations, HuntixQuery for natural-language threat hunting.
Go SDK & gRPC
High-throughput gRPC streaming for telemetry ingestion. Sub-millisecond latency for real-time detection pipelines. OpenAPI 3.1 REST fallback.
Terraform Provider & Helm Charts
Deploy Quellra Edge on Kubernetes with Helm. Provision cloud infrastructure and agent configurations via Terraform. GitOps-ready IaC.
Pre-Built Integrations
Splunk, Elastic, Sentinel, Chronicle, CrowdStrike, SentinelOne, Defender, Palo Alto, Fortinet, Check Point, Okta, Entra ID, CyberArk, XSOAR, Swimlane, AWS/Azure/GCP.
Stream, Hunt, Investigate, Integrate
Real-time event streaming, natural language threat hunting on RAPIDS GPU, autonomous agent pipelines, and REST API integrations with Splunk, Elastic, Sentinel, and more.
from quellra import StreamClient, AgentPipeline, HuntixQuery # Real-time event streamstream = StreamClient(api_key="qr_...")async for event in stream.subscribe(confidence_threshold=0.85): # Trigger autonomous investigation investigation = await AgentPipeline.investigate( event_id=event.id, agents=["correlation", "attack_chain", "blast_radius", "report"], auto_respond=True ) # Natural language threat hunting (RAPIDS GPU execution)results = await HuntixQuery.hunt( query="processes that loaded LSASS within 30 minutes of new external connections, past 90 days", confidence_threshold=0.75) # Integrations via REST APIimport requests # Fetch IOC intelligenceioc = requests.get( "https://api.quellra.com/v1/threat-intel/ioc/185.220.101.45", headers={"Authorization": f"Bearer {api_key}"}).json() # Trigger Splunk forwardingrequests.post( "https://api.quellra.com/v1/integrations/splunk/forward", json={"event_ids": [event.id], "index": "quellra_threats"}, headers={"Authorization": f"Bearer {api_key}"})Community & Support
Join thousands of security engineers building with Quellra. Get help, share integrations, and contribute to the ecosystem.
GitHub
Open-source examples, SDKs, and community plugins
Discord
Real-time support from the Quellra engineering team
Stack Overflow
Tagged questions and community answers
Infrastructure You Can Depend On
API uptime SLA
p99 response time
API endpoints
Pre-built integrations
GetYourAPIKey
Sign up for free and start integrating Quellra into your security stack in under 5 minutes.