Cisco Umbrella Investigate SIG Console & API S | Security EA 3.0 — E3S-USIGE-INVAPI-S

Give security teams the access they need to investigate threats with speed and consistency. Cisco Umbrella Investigate SIG Console & API - S is built for Security EA 3.0 environments that depend on both interactive analysis and programmatic access. The console supports hands-on investigation workflows, while the API enables integration into broader security operations and automation pipelines. For organizations running distributed security programs, the value is in reducing friction between investigation, orchestration, and reporting. This licensing item is suited to teams that need to query, correlate, and operationalize threat intelligence without forcing analysts to work in isolated tools. It helps standardize how investigation data is accessed and consumed across the security stack. As part of Cisco’s enterprise security portfolio, this offering is a practical fit for teams that want tighter control over investigation workflows and cleaner integration with existing processes. It is especially relevant where security operations must scale across multiple teams, tools, and response paths, and where API access is as important as console visibility. Ideal For Investigating suspicious activity through a security analyst console Feeding threat intelligence into automation and orchestration workflows Supporting distributed SOC teams with shared investigation access Standardizing investigation data access across enterprise security operations Why This Product 1 Includes both console and API access 2 Designed for Cisco Security EA 3.0 3 Supports analyst and automation workflows 4 Fits enterprise security operations environments