Find companies by name, risk score, industry, or risk rules with paginated risk assessment results.
What this endpoint does
Searches the Recorded Future Intelligence Cloud for Company entities. Use freetext for name-based search. Structured filters include riskScore (numeric range, e.g., [50,)), riskRule (specific risk rule name from Company: List Risk Rules), industry, domicile (country entity ID — use Entity Match to look up country IDs), parent (parent company ID), and list (list ID from Lists: Search). Date filters: firstSeen, lastSeen. Sort with orderBy (riskscore, criticality, firstseen, lastseen, etc.) and direction (asc/desc). This endpoint is the primary way to discover Company entity IDs for use in Company: Lookup.
Response data
Returns matching company entities with their risk assessment data and timestamps — enough to triage which companies in your scope have elevated risk and why. Note that Company entities use different criticality labels than IOC types: Informational, Moderate, High, and Very High (not the Unusual/Suspicious/Malicious/Very Malicious labels used for IPs, domains, and hashes). Paginated with offset-based pagination; limit max 1,000 and limit + from cannot exceed 1,000. Results are under data.results, with counts as a sibling of data. The limit parameter has a default value of 10. The intention is to use pagination to get further results. Though limit can be set to higher values, depending on which fields are used for enrichment, this might result in slower queries and possibly even time outs.