Sold by: RelayShield
RelayShield Attack Surface & Supply Chain delivers metered access to five exposure detection APIs, billed entirely through AWS Marketplace. It covers third-party and vendor exposure, asset intelligence sweeps, public artifact secret detection, threat actor lookup, and session hijack risk. The bundle is licensed independently, with no dependency on any other RelayShield product.
Overview
Attack Surface & Supply Chain is built for teams whose exposure does not stop at their own perimeter.
The bundle screens vendor and third-party domains for exposed credentials, lookalike registrations and breach history; registers an asset watchlist and sweeps it as new exposure is observed; detects live credentials left in public artifacts across code hosts and package registries; looks up actors, campaigns and CVEs against exploit chatter; and reports active session hijack risk from stolen session artefacts.
Session hijack risk is the signal most often missing from an identity programme. A stolen session cookie is not remediated by a password reset: the session is itself the credential. Surfacing it alongside supply chain and secret exposure is what lets a team tell a stale leak from an intrusion already underway.
Intelligence is collected continuously from monitored criminal Telegram marketplaces, infostealer log dumps, public indicator feeds and public code artifacts. RelayShield deliberately does not quote a corpus headline: a total that is correct this month is wrong next month, and what is durable is the sources.
All five endpoints are REST, authenticated with a single header, and metered per call through AWS Marketplace. There is no separate account to create and no payment method to add.
Highlights
- Five attack surface and supply chain APIs licensed as one bundle through AWS Marketplace, with no dependency on any other bundle.
- Session hijack detection from stolen session artefacts, the exposure a password reset does not remediate, correlated with secret and supply chain findings.
- Collected continuously from monitored criminal Telegram marketplaces, infostealer log dumps, public indicator feeds and public code artifacts.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Attack Surface & Supply Chain - Monthly | Monthly minimum commitment for Attack Surface & Supply Chain API access, five endpoints. | $100.00 |
The following dimensions are not included in the contract terms, which will be charged based on your usage.
Dimension | Description | Cost/unit |
|---|---|---|
Supply Chain Exposure Check | Checks a vendor domain for exposed credentials, lookalikes and breach history. | $0.10 |
Asset Intelligence Sweep | Registers an asset watchlist and sweeps it against newly observed exposure. | $0.15 |
Public Artifact Secret Scan | Detects live credentials in public artifacts across code hosts and package registries. | $0.35 |
Threat Actor and Campaign Lookup | Looks up an actor, campaign or CVE against exploit chatter from criminal channels. | $0.30 |
Session Hijack Risk | Detects session and adversary-in-the-middle hijack risk from stolen session artefacts. | $0.30 |
Dimensions summary
This listing combines usage-based units with a monthly commitment. You buy units for five separate check types: Supply Chain Exposure Check, Asset Intelligence Sweep, Public Artifact Secret Scan, Threat Actor and Campaign Lookup, and Session Hijack Risk. Each unit covers one call to that check, so cost grows with how many checks you run. The Attack Surface & Supply Chain - Monthly dimension sets a monthly minimum commitment that grants access to all five endpoints. You pay the monthly floor plus the per-unit usage across the five check types.
Top-of-mind questions for buyers
One unit equals one API call to that check. A Supply Chain Exposure Check scans up to 10 vendor domains per call. An Asset Intelligence Sweep registers or sweeps your watchlist against the indicator corpus. Each Public Artifact Secret Scan, Threat Actor and Campaign Lookup, or Session Hijack Risk check also bills one unit per call.
Both apply together. The Attack Surface & Supply Chain - Monthly dimension sets a monthly minimum floor for access to all five endpoints. On top of that, you pay per unit for each check you run. Your call volume across the five check types drives how far above the floor your bill goes.
You still pay the monthly minimum commitment even in a low-usage month. That floor grants access to the five endpoints. Usage charges only add on top when you run checks. There is no separate payment method to manage; all billing runs through your AWS account.
api.relayshield.net
Helpful?
Vendor refund policy
Email support: support@relayshield.net . Full API documentation, authentication steps, endpoint URLs, and sample requests are included in this product's Usage Instructions. Response within 1 business day for standard issues.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Additional details
Usage instructions
Overview RelayShield Attack Surface & Supply Chain (Bundle B) is a REST API. All endpoints are served from a single base URL and authenticated with one header.
Base URL https://api.relayshield.net
Getting your API key
- Subscribe to this product in AWS Marketplace.
- On the "Set up your account" page after subscribing, enter the email address where your key should be sent.
- Your API key is emailed automatically when the subscription activates. No separate account or payment method is required; all billing is handled by AWS Marketplace.
- If the email has not arrived within 15 minutes, contact support@relayshield.net with your AWS account ID.
Authentication Every request requires this header: X-RS-API-KEY: YOUR_API_KEY
Verifying your access Run this call to confirm your key is active. A 200 response confirms the endpoint is reachable and your key is valid.
curl -X POST https://api.relayshield.net/v1/metered/supply-chain
-H "X-RS-API-KEY: YOUR_API_KEY"
-H "Content-Type: application/json"
-d '{"domains": ["example.com"]}'
Endpoints
-
Supply Chain Exposure Check POST /v1/metered/supply-chain Body: {"domains": ["vendor1.com", "vendor2.com"]} Screens up to ten vendor domains in one call for exposed credentials, lookalike registrations and breach history.
-
Asset Intelligence Sweep POST /v1/metered/asset-intel Body: {"assets": ["example.com", "203.0.113.0/24"]} Registers an asset watchlist and sweeps it against newly observed exposure.
-
Public Artifact Secret Scan POST /v1/metered/secret-scan Body: {"domain": "example.com"} Detects live credentials in public artifacts across six sources, including code hosts and package registries.
-
Threat Actor and Campaign Lookup POST /v1/metered/threat-actor Body: {"query": "CVE-2026-1234"} Returns exploit chatter and actor or campaign context collected from monitored criminal channels.
-
Session Hijack Risk POST /v1/metered/session-risk Body: {"email": "user@example.com "} Reports active session and adversary-in-the-middle hijack risk from stolen session artefacts. A stolen session is not remediated by a password reset, which is what separates this from a breach check.
Responses Every endpoint returns JSON in the form {"ok": true, "data": {...}}. An error returns {"ok": false, "error": "..."} with a non-2xx status. Only a 2xx response is metered.
Rate limits and billing Usage is metered per call and reported to AWS Marketplace. There is no separate invoice and no payment method to add.
Support Email support@relayshield.net . Full API documentation, authentication steps, endpoint URLs and sample requests are published at https://api.relayshield.net/developers
Support
Vendor support
Email support: support@relayshield.net . Full API documentation, authentication steps, endpoint URLs, and sample requests are published at
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
RelayShield's Consumption Security API Bundles deliver metered access to focused threat intelligence and identity risk detection capabilities, billed entirely through AWS Marketplace. Bundle D, Agentic Attack Surface, covers MCP registry risk, prompt-injection breach correlation, agent-framework CVE targeting, bulk per-agent identity risk scoring and LLM credential exposure detection, scored from RelayShield's own corpus. Callable by AI agents over MCP and by REST.
RelayShield delivers threat intelligence and identity security via REST API - 4.5M+ IOC corpus, breach detection, SIM swap monitoring, infostealer exposure, ransomware victim tracking, and session hijack detection. Built for MSPs, MSSPs, and security-forward development teams.
RelayShield Core Identity Exposure delivers metered access to six identity threat detection APIs, billed entirely through AWS Marketplace. It covers breach exposure, SIM swap detection, infostealer log checks, domain lookalike detection, OAuth token exposure, and crypto threat intelligence. The bundle is licensed independently, with no dependency on any other RelayShield product or bundle.
Implement Fluid Attacks' comprehensive, AI-powered solution and develop secure software without delays. As an all-in-one solution, Fluid Attacks accurately helps you prevent, detect, manage and remediate vulnerabilities across your application attacks surface. The solution integrates its AI, automated tool, and team of pentesters to perform AI SAST, SAST, SCA, DAST, SCR, PtaaS and RE to help you improve your security posture. This way, Fluid Attacks delivers accurate knowledge of the security status of your application. This means security goes alongside innovation without hindering your speed. Fluid Attacks provides you with expert knowledge about vulnerabilities and support options that enable you to remediate the security issues in your application.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.