Your brand. Your cloud.
Our protection engine.

import { EppClient } from '@yourbrand/epp-sdk';

const epp = new EppClient({
  baseUrl: 'https://api.yourbrand.com/v1',
  apiKey:  process.env.EPP_API_KEY,   // sk_live_...
});

// 1. Provision a customer tenant, already branded.
const tenant = await epp.tenants.create({
  name: 'Acme Corp',
  plan: 'business',
  seatLimit: 250,
  branding: { logoUrl: 'https://cdn.yourbrand.com/acme.svg',
              primaryColor: '#ffd200' },
});

// 2. Mint an enrollment token and hand back a signed installer.
const enroll = await epp.enrollment.createToken({
  tenantId:  tenant.id,
  siteId:    'hq-roswell',
  expiresIn: '7d',
});
console.log(enroll.installerUrl.windows);   // branded MSI

// 3. React to detections as they land.
for await (const d of epp.detections.stream({ severity: ['high', 'critical'] })) {
  if (d.verdict === 'malicious') {
    await epp.response.isolate(d.endpointId, { reason: `auto:${d.ruleId}` });
    await epp.tickets.create({ psa: 'halo', subject: d.title, body: d.summary });
  }
}

import os
from yourbrand_epp import EppClient

epp = EppClient(
    base_url="https://api.yourbrand.com/v1",
    api_key=os.environ["EPP_API_KEY"],
)

# Nightly posture sweep across every tenant you manage.
for tenant in epp.tenants.list():
    posture = epp.reports.posture(tenant_id=tenant.id)

    if posture.score < 70:
        epp.reports.export(
            tenant_id=tenant.id,
            format="pdf",
            template="executive_summary",
        )

    # Auto-isolate anything confirmed malicious in the last day.
    for det in epp.detections.list(tenant_id=tenant.id,
                                   severity=["critical"],
                                   since="24h"):
        if det.verdict == "malicious":
            epp.response.isolate(det.endpoint_id,
                                 reason=f"auto:{det.rule_id}")

package main

import (
    "context"
    "log"
    "os"
    "time"

    epp "github.com/yourbrand/epp-go"
)

func main() {
    ctx := context.Background()

    client, err := epp.New(epp.Config{
        BaseURL: "https://api.yourbrand.com/v1",
        APIKey:  os.Getenv("EPP_API_KEY"),
    })
    if err != nil {
        log.Fatal(err)
    }

    dets, err := client.Detections.List(ctx, &epp.DetectionQuery{
        Severity: []string{"critical"},
        Since:    24 * time.Hour,
    })
    if err != nil {
        log.Fatal(err)
    }

    for _, d := range dets.Items {
        if d.Verdict != "malicious" {
            continue
        }
        if _, err := client.Response.Isolate(ctx, d.EndpointID,
            &epp.IsolateOpts{Reason: "auto:" + d.RuleID}); err != nil {
            log.Printf("isolate %s: %v", d.EndpointID, err)
        }
    }
}

Import-Module YourBrand.EPP

Connect-EppPartner -ApiKey $env:EPP_API_KEY `
                   -BaseUrl 'https://api.yourbrand.com/v1'

# Onboard a new customer and stage their rollout.
$tenant = New-EppTenant -Name 'Acme Corp' -Plan business -SeatLimit 250

$token = New-EppEnrollmentToken -TenantId $tenant.Id `
                                -SiteId 'hq-roswell' -ExpiresIn 7d

Save-EppInstaller -Token $token.Value -Os windows `
                  -Path 'C:\Deploy\acme-agent.msi'

# Sweep and isolate anything confirmed malicious today.
Get-EppDetection -TenantId $tenant.Id -Severity Critical -Since 24h |
    Where-Object { $_.Verdict -eq 'malicious' } |
    ForEach-Object {
        Invoke-EppIsolate -EndpointId $_.EndpointId -Reason "auto:$($_.RuleId)"
    }

# Create a tenant
curl -sS -X POST https://api.yourbrand.com/v1/tenants \
  -H "Authorization: Bearer $EPP_API_KEY" \
  -H "Idempotency-Key: 9f1c2e4a-7b33-4d18-9a52-6c0d7e8b1f44" \
  -H "Content-Type: application/json" \
  -d '{
        "name": "Acme Corp",
        "plan": "business",
        "seat_limit": 250
      }'

# Query critical detections for that tenant
curl -sS "https://api.yourbrand.com/v1/detections?severity=critical&since=24h" \
  -H "Authorization: Bearer $EPP_API_KEY" \
  -H "X-EPP-Tenant: ten_8fQ2xKpL"

# Isolate an endpoint
curl -sS -X POST https://api.yourbrand.com/v1/endpoints/ep_3kD9mZ/isolate \
  -H "Authorization: Bearer $EPP_API_KEY" \
  -H "X-EPP-Tenant: ten_8fQ2xKpL" \
  -H "Content-Type: application/json" \
  -d '{"reason": "confirmed ransomware canary trip"}'