curl --request POST \
--url https://app.aegister.com/api/v1/cloud-defender/{id}/security-events/{event_id}/verdict \
--header 'Content-Type: application/json' \
--header 'X-Aegister-Token: <api-key>' \
--data '
{
"verdict": "ban",
"hours": 720
}
'
{
"error": 0,
"messages": [],
"data": {
"verdict": "ban",
"source_ip": "203.0.113.7",
"family": "sqli",
"rule": {
"id": 41,
"net": "203.0.113.7",
"action": "block",
"source": "manual",
"reason": "",
"expires_at": "2026-11-27T09:30:00Z",
"created_at": "2026-10-28T09:30:00Z",
"created_by": "00000000-0000-4000-8000-000000000000",
"event_id": 1520
}
}
}{
"error": 1,
"messages": [
"Invalid data provided",
"net_invalid",
"net_private",
"net_cloudflare",
"net_known_good",
"net_listed"
]
}{
"error": 1,
"messages": []
}{
"error": 1,
"messages": []
}Detections
Mark a Cloud Defender detection legit or ban its source
Decide on a detection from the Detections tab. legit says this source’s matches of this kind are expected on your site: they stay on record, marked as legit, and are no longer counted or alerted. ban blocks the source on this domain for hours, or until you remove it; the ban appears in the banned addresses list. Owners and security officers with a live licence.
POST
/
api
/
v1
/
cloud-defender
/
{id}
/
security-events
/
{event_id}
/
verdict
curl --request POST \
--url https://app.aegister.com/api/v1/cloud-defender/{id}/security-events/{event_id}/verdict \
--header 'Content-Type: application/json' \
--header 'X-Aegister-Token: <api-key>' \
--data '
{
"verdict": "ban",
"hours": 720
}
'
{
"error": 0,
"messages": [],
"data": {
"verdict": "ban",
"source_ip": "203.0.113.7",
"family": "sqli",
"rule": {
"id": 41,
"net": "203.0.113.7",
"action": "block",
"source": "manual",
"reason": "",
"expires_at": "2026-11-27T09:30:00Z",
"created_at": "2026-10-28T09:30:00Z",
"created_by": "00000000-0000-4000-8000-000000000000",
"event_id": 1520
}
}
}{
"error": 1,
"messages": [
"Invalid data provided",
"net_invalid",
"net_private",
"net_cloudflare",
"net_known_good",
"net_listed"
]
}{
"error": 1,
"messages": []
}{
"error": 1,
"messages": []
}Authorizations
Body
application/json