Developers

Build on GPU-Native Security Intelligence

Integrate NVIDIA RAPIDS analytics, Triton Inference Server, and NIM-powered autonomous agents into your security stack with Python SDK, Go SDK, gRPC streaming, Terraform provider, and Helm charts.

Quick Start

Stream Events, Trigger Agents, Get Results

quickstart.py
# Install the Quellra SDKpip install quellra # Configure and start monitoringfrom quellra import StreamClient, AgentPipeline # Real-time event stream with confidence thresholdstream = StreamClient(api_key="qr_...")async for event in stream.subscribe(confidence_threshold=0.85):    print(f"Threat detected: {event.type} | Confidence: {event.confidence}")     # Trigger autonomous investigation pipeline    investigation = await AgentPipeline.investigate(        event_id=event.id,        agents=["correlation", "attack_chain", "blast_radius", "report"],        auto_respond=True  # Autonomous containment    )     print(f"Investigation: {investigation.summary}")    print(f"MITRE ATT&CK: {investigation.mitre_tactics}")
Developer Tools

Every Interface You Need

REST, GraphQL, WebSockets, CLI, and native SDKs — choose the integration path that fits your workflow.

Quellra Stream API

Real-time event ingestion and detection results. WebSocket and gRPC streaming for high-throughput telemetry. Filter by confidence threshold, severity, or source.

Agent Pipeline API

Trigger NIM-powered autonomous investigations. Chain correlation, attack-chain, blast-radius, and report agents. Structured JSON reports with MITRE ATT&CK mappings.

Threat Intelligence API

IOC lookups, MITRE ATT&CK mappings, cuGraph-powered attack-chain visualization. Query historical threat data with RAPIDS cuDF for sub-second responses on TB-scale datasets.

Huntix Query API

Natural language threat hunting queries compiled to RAPIDS GPU execution. Ask 'processes that loaded LSASS within 30 minutes of external connections, past 90 days' — get results in 4 minutes (vs 5 hours on CPU).

Webhook & Event API

Real-time alerts, agent actions, and detection events delivered to your infrastructure. Cryptographically signed webhooks with configurable filters and automatic retries.

REST & gRPC APIs

Comprehensive RESTful endpoints (OpenAPI 3.1 spec) for threat data, agent management, and compliance reporting. High-throughput gRPC streaming for real-time telemetry ingestion.

Huntix Query API

Natural Language Threat Hunting on GPU

Ask complex threat-hunting questions in plain English. Quellra compiles your query to RAPIDS cuDF and executes on GPU — 75× faster than Spark/CPU.

Terminal
$ quellra hunt "processes that loaded LSASS within 30 minutes of new external connections, past 90 days"
Compiling natural language query to RAPIDS cuDF...
Executing on GPU (2.1B events, 412 GB)...
✓ Query complete in 4m 12s (vs 5h 18m on Spark/CPU)
┌──────────────────────┬───────────┬─────────────┬────────────┐
│ Process │ Host │ External IP │ Confidence │
├──────────────────────┼───────────┼─────────────┼────────────┤
│ mimikatz.exe │ ws-1045 │ 185.220.*.* │ 0.96 │
│ powershell.exe │ ws-1045 │ 185.220.*.* │ 0.89 │
│ rundll32.exe │ ws-2301 │ 104.21.*.* │ 0.78 │
└──────────────────────┴───────────┴─────────────┴────────────┘
3 suspicious patterns detected. Triggering autonomous investigation...
API Reference

Comprehensive API Coverage

60+ endpoints across real-time streaming, agent orchestration, threat intelligence, natural language hunting, attack-chain visualization, and SIEM integrations.

GET/v1/stream/subscribe
POST/v1/agents/investigate
GET/v1/threat-intel/ioc/:indicator
POST/v1/huntix/query
GET/v1/threats/:id/attack-chain
POST/v1/integrations/splunk/forward
Developer Experience

Designed for Developer Productivity

Python SDK (pip install quellra)

Type-annotated async client. StreamClient for real-time events, AgentPipeline for autonomous investigations, HuntixQuery for natural-language threat hunting.

Go SDK & gRPC

High-throughput gRPC streaming for telemetry ingestion. Sub-millisecond latency for real-time detection pipelines. OpenAPI 3.1 REST fallback.

Terraform Provider & Helm Charts

Deploy Quellra Edge on Kubernetes with Helm. Provision cloud infrastructure and agent configurations via Terraform. GitOps-ready IaC.

Pre-Built Integrations

Splunk, Elastic, Sentinel, Chronicle, CrowdStrike, SentinelOne, Defender, Palo Alto, Fortinet, Check Point, Okta, Entra ID, CyberArk, XSOAR, Swimlane, AWS/Azure/GCP.

Integration Examples

Stream, Hunt, Investigate, Integrate

Real-time event streaming, natural language threat hunting on RAPIDS GPU, autonomous agent pipelines, and REST API integrations with Splunk, Elastic, Sentinel, and more.

integration-examples.py
from quellra import StreamClient, AgentPipeline, HuntixQuery # Real-time event streamstream = StreamClient(api_key="qr_...")async for event in stream.subscribe(confidence_threshold=0.85):    # Trigger autonomous investigation    investigation = await AgentPipeline.investigate(        event_id=event.id,        agents=["correlation", "attack_chain", "blast_radius", "report"],        auto_respond=True    ) # Natural language threat hunting (RAPIDS GPU execution)results = await HuntixQuery.hunt(    query="processes that loaded LSASS within 30 minutes of new external connections, past 90 days",    confidence_threshold=0.75) # Integrations via REST APIimport requests # Fetch IOC intelligenceioc = requests.get(    "https://api.quellra.com/v1/threat-intel/ioc/185.220.101.45",    headers={"Authorization": f"Bearer {api_key}"}).json() # Trigger Splunk forwardingrequests.post(    "https://api.quellra.com/v1/integrations/splunk/forward",    json={"event_ids": [event.id], "index": "quellra_threats"},    headers={"Authorization": f"Bearer {api_key}"})
Community

Community & Support

Join thousands of security engineers building with Quellra. Get help, share integrations, and contribute to the ecosystem.

GitHub

Open-source examples, SDKs, and community plugins

Discord

Real-time support from the Quellra engineering team

Stack Overflow

Tagged questions and community answers

Reliability

Infrastructure You Can Depend On

0.9%

API uptime SLA

0ms

p99 response time

0+

API endpoints

0+

Pre-built integrations

GetYourAPIKey

Sign up for free and start integrating Quellra into your security stack in under 5 minutes.