Incident Response Database

IR Database

Incidents often require us to rapidly identify which incident response team is responsible for a particular network, corporation or country. FIRST is developing an automated method to access information on Computer Security Incident Response Teams (CSIRT) and other types of incident handling organizations.

As an initial step, FIRST is making available, in beta, an API endpoint that allows querying the FIRST Member database in an automated manner.

In addition, FIRST has published a format to describe common Incident Response Team and abuse contact information, which other organizations are welcome to adopt.

More information

Instructions on how to use the API can be found at: https://api.first.org/

The Global IRT project page can be accessed on GitHub.