Skip to main content

Apr 30, 2026

URL Rewriting Click Events API

Security teams using URL Rewriting can now access click event data programmatically through a new REST API endpoint.

With this release:

  • A new REST API endpoint returns structured data on rewritten URLs clicked by end users, including click type (Click vs. Clickthrough), clicked timestamp, the malicious link, message metadata, and explainability insights for why the URL was rewritten

  • Teams can pull click telemetry directly into SIEM, SOAR, XDR, and other security tools to automate investigations, alerting, and reporting.

Now live for Microsoft 365 customers with URL Rewriting enabled.

Protect Against Evolving Email Threats

See how behavioral AI detects attacks that legacy defenses miss.