Skip to main content
Identifies other domains found in credential records on the same infected machines as your target domain — a strong signal for supply-chain and vendor risk (e.g. an employee whose corporate credentials and a critical SaaS vendor’s credentials were both stolen from the same compromised laptop).

​
Request

POST /v1/domain/third-party-risk · Required scope: search:advanced (pro/ultra only) · Aggregation (counts toward agg_per_min) · Not paginated
ParameterTypeRequiredDefaultDescription
domainsstring[]Yes—Domains to analyze, min 1 item
start_datestring (date-time) | nullNo—Inclusive start filter, clamped by query_window_days
end_datestring (date-time) | nullNo—Inclusive end filter
limitintegerNo251–25

​
Example request

curl -X POST https://api.vantaprism.me/v1/domain/third-party-risk \
  -H "api-key: $VANTAPRISM_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "domains": ["acme-corp.com"], "limit": 25 }'

​
Response

200 OK — array of ThirdPartyRiskResult, ordered by shared_victim_count descending. Not paginated — limit (max 25) bounds the result directly. 
{
  "data": [
    {
      "third_party_domain": "github.com",
      "shared_victim_count": 23,
      "credential_count": 31
    },
    {
      "third_party_domain": "slack.com",
      "shared_victim_count": 18,
      "credential_count": 22
    }
  ],
  "meta": {
    "request_id": "req_01HZXK3Q7N8YV6F3M2P9JABCDE",
    "took_ms": 71.2,
    "tier": "ultra"
  }
}
FieldDescription
third_party_domainA domain whose credentials were found on the same infected machines as domains
shared_victim_countNumber of distinct victims with credentials for both domains
credential_countTotal third_party_domain credential rows across those shared victims

​
Errors

StatuscodeCause
400VALIDATION_ERRORdomains empty, or limit > 25
403FORBIDDEN_SCOPEKey lacks search:advanced — this endpoint is unavailable on the free tier
429RATE_LIMIT_EXCEEDEDExceeded agg_per_min
See Errors for the full catalog.

​
Tier notes

This is one of the few endpoints not available on free — it requires search:advanced, granted to pro and ultra. See Rate Limits & Tiers.