Developers

Build on GPU-Native Security Intelligence

Integrate NVIDIA RAPIDS analytics, Triton Inference Server, and NIM-powered autonomous agents into your security stack with Python SDK, Go SDK, gRPC streaming, Terraform provider, and Helm charts.

Quick Start

Stream Events, Trigger Agents, Get Results

quickstart.py
# Install the Quellra SDKpip install quellra # Configure and start monitoringfrom quellra import StreamClient, AgentPipeline # Real-time event stream with confidence thresholdstream = StreamClient(api_key="qr_...")async for event in stream.subscribe(confidence_threshold=0.85):    print(f"Threat detected: {event.type} | Confidence: {event.confidence}")     # Trigger autonomous investigation pipeline    investigation = await AgentPipeline.investigate(        event_id=event.id,        agents=["correlation", "attack_chain", "blast_radius", "report"],        auto_respond=True  # Autonomous containment    )     print(f"Investigation: {investigation.summary}")    print(f"MITRE ATT&CK: {investigation.mitre_tactics}")
Developer Tools

Every Interface You Need

REST, GraphQL, WebSockets, CLI, and native SDKs — choose the integration path that fits your workflow.

Quellra Stream API

Real-time event ingestion and detection results. WebSocket and gRPC streaming for high-throughput telemetry. Filter by confidence threshold, severity, or source.

Agent Pipeline API

Trigger NIM-powered autonomous investigations. Chain correlation, attack-chain, blast-radius, and report agents. Structured JSON reports with MITRE ATT&CK mappings.

Threat Intelligence API

IOC lookups, MITRE ATT&CK mappings, cuGraph-powered attack-chain visualization. Query historical threat data with RAPIDS cuDF for sub-second responses on TB-scale datasets.

Huntix Query API

Natural language threat hunting queries compiled to RAPIDS GPU execution. Ask 'processes that loaded LSASS within 30 minutes of external connections, past 90 days' — get results in 4 minutes (vs 5 hours on CPU).

Webhook & Event API

Real-time alerts, agent actions, and detection events delivered to your infrastructure. Cryptographically signed webhooks with configurable filters and automatic retries.

REST & gRPC APIs

Comprehensive RESTful endpoints (OpenAPI 3.1 spec) for threat data, agent management, and compliance reporting. High-throughput gRPC streaming for real-time telemetry ingestion.

Huntix Query API

Natural Language Threat Hunting on GPU

Ask complex threat-hunting questions in plain English. Quellra compiles your query to RAPIDS cuDF and executes on GPU — 75× faster than Spark/CPU.

Terminal
quellra hunt "processes that loaded LSASS within 30 minutes of new external connections, past 90 days"
Compiling natural language query to RAPIDS cuDF...
Executing on GPU (2.1B events, 412 GB)...
✓ Query complete in 4m 12s (vs 5h 18m on Spark/CPU)
┌──────────────────────┬───────────┬─────────────┬────────────┐
│ Process │ Host │ External IP │ Confidence │
├──────────────────────┼───────────┼─────────────┼────────────┤
│ mimikatz.exe │ ws-1045 │ 185.220.*.* │ 0.96 │
│ powershell.exe │ ws-1045 │ 185.220.*.* │ 0.89 │
│ rundll32.exe │ ws-2301 │ 104.21.*.* │ 0.78 │
└──────────────────────┴───────────┴─────────────┴────────────┘
3 suspicious patterns detected. Triggering autonomous investigation...
API Reference

Comprehensive API Coverage

60+ endpoints across real-time streaming, agent orchestration, threat intelligence, natural language hunting, attack-chain visualization, and SIEM integrations.

GET/v1/stream/subscribe
POST/v1/agents/investigate
GET/v1/threat-intel/ioc/:indicator
POST/v1/huntix/query
GET/v1/threats/:id/attack-chain
POST/v1/integrations/splunk/forward
Developer Experience

Designed for Developer Productivity

Python SDK (pip install quellra)

Type-annotated async client. StreamClient for real-time events, AgentPipeline for autonomous investigations, HuntixQuery for natural-language threat hunting.

Go SDK & gRPC

High-throughput gRPC streaming for telemetry ingestion. Sub-millisecond latency for real-time detection pipelines. OpenAPI 3.1 REST fallback.

Terraform Provider & Helm Charts

Deploy Quellra Edge on Kubernetes with Helm. Provision cloud infrastructure and agent configurations via Terraform. GitOps-ready IaC.

Pre-Built Integrations

Splunk, Elastic, Sentinel, Chronicle, CrowdStrike, SentinelOne, Defender, Palo Alto, Fortinet, Check Point, Okta, Entra ID, CyberArk, XSOAR, Swimlane, AWS/Azure/GCP.

Integration Examples

Stream, Hunt, Investigate, Integrate

Real-time event streaming, natural language threat hunting on RAPIDS GPU, autonomous agent pipelines, and REST API integrations with Splunk, Elastic, Sentinel, and more.

integration-examples.py
from quellra import StreamClient, AgentPipeline, HuntixQuery # Real-time event streamstream = StreamClient(api_key="qr_...")async for event in stream.subscribe(confidence_threshold=0.85):    # Trigger autonomous investigation    investigation = await AgentPipeline.investigate(        event_id=event.id,        agents=["correlation", "attack_chain", "blast_radius", "report"],        auto_respond=True    ) # Natural language threat hunting (RAPIDS GPU execution)results = await HuntixQuery.hunt(    query="processes that loaded LSASS within 30 minutes of new external connections, past 90 days",    confidence_threshold=0.75) # Integrations via REST APIimport requests # Fetch IOC intelligenceioc = requests.get(    "https://api.quellra.com/v1/threat-intel/ioc/185.220.101.45",    headers={"Authorization": f"Bearer {api_key}"}).json() # Trigger Splunk forwardingrequests.post(    "https://api.quellra.com/v1/integrations/splunk/forward",    json={"event_ids": [event.id], "index": "quellra_threats"},    headers={"Authorization": f"Bearer {api_key}"})
Community

Community & Support

Join thousands of security engineers building with Quellra. Get help, share integrations, and contribute to the ecosystem.

GitHub

Open-source examples, SDKs, and community plugins

Discord

Real-time support from the Quellra engineering team

Stack Overflow

Tagged questions and community answers

Reliability

Infrastructure You Can Depend On

0.9%

API uptime SLA

0ms

p99 response time

0+

API endpoints

0+

Pre-built integrations

GetYourAPIKey

Sign up for free and start integrating Quellra into your security stack in under 5 minutes.