proofpoint

Copy cat model for Proofpoint

Proofpoint API Code Snippets

tools to mess around with proofpoint URLs

Python program to pull URL threat information from the ProofPoint TAP SIEM API and populate a URL block list

Discover Mail Recon info for a given domain. Detect where mail is really hosted, regardless of MX record. Good for uncovering if it is possible to bypass spam filtering, such as Proofpoint.

Terraform Meta Networks provider

MCP server for Proofpoint TAP and Essentials APIs — threat intelligence, email tracing, and MSP org management

Mobile Abuse Reporting Schema

Recipient-side control for cold email: classify the mail gateway behind each recipient, isolate gateway cohorts, and throttle per-account exposure before launch. Exports a rollout plan; never sends.

Criteo JS API for ProofPoint URL defense

Proofpoint API Client Library

Node-RED nodes for talking to Proofpoint

Terraform Meta Networks provider

Node.js/TypeScript client library for the Proofpoint Essentials API

Add Proofpoint TAP Malware findings to Cisco AMP Simple Custom Detections list using PowerShell

Wazuh SIEM wodle that ingests threat events and people intelligence from Proofpoint TAP via Proofpoint's SIEM and People APIs.

Scripts helpful for day-to-day operations

MCP server for Proofpoint Essentials — MSP org, domain, user, licensing, and reporting management

ObserveIT (Proofpoint) — independent third-party profile of a public API surface, by API Evangelist. ObserveIT was an insider threat management (ITM) vendor acquired by Proofpoint in 2019 and folded into the Proofpoint Insider Threat Management product line within Proofpoint's Information Protection portfolio.

Session notes from Proofpoint Cybersecurity Academy: HTML/PDF briefings and LinkedIn recap posters for the AI Email Security, AI Data Security and AI Agent Security Specialist certification tracks.