One endpoint
POST JSON events to api.hanasand.com/mill using the organization API key.
Loading
Loading
Security Monitoring · managed detection
Send JSON events to one Hanasand endpoint. Security Monitoring preserves event context, checks authentication behavior, and gives analysts evidence for suspicious logins, impossible travel, and other threats. Mill is the API service that processes the feed.
POST JSON events to api.hanasand.com/mill using the organization API key.
Start with repeated failures, new countries, and geographically incompatible logins.
Inspect the matching events, rule ID, source context, and original event sample.
Send an event
POST https://api.hanasand.com/mill
Authorization: Bearer hsk_<organization-key>
Content-Type: application/json
{
"events": [{
"timestamp": "2026-08-03T08:15:00Z",
"event_type": "authentication",
"action": "login",
"outcome": "success",
"user": {"id": "user-123"},
"source": {"ip": "203.0.113.10", "country": "NO"}
}]
}Security Monitoring scope
Security Monitoring is built on the existing Hanasand organization, API-key, tenant, and analyst workflows. The Mill ingestion service keeps one stable endpoint while vendor adapters and broader rule families feed the same event model.