> ## Documentation Index
> Fetch the complete documentation index at: https://resq-dependabot-github-actions-github-actions-478e18be3d.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# DetectThreatPatterns

# Function: detectThreatPatterns()

> **detectThreatPatterns**(`input`, `config?`): [`ThreatDetectionResult`](../interfaces/ThreatDetectionResult)

Defined in: [validators.ts:456](https://github.com/resq-software/npm/blob/fe2e20ae9db8398a0db1e3218edaabb3cf7004d6/packages/security/src/validators.ts#L456)

Run every enabled detector against `input` and aggregate findings.

Returns early-but-not-immediately: each individual detector still
runs to completion, but each detector returns at most one finding,
so the aggregate threats array is small (≤ 6 entries).

Non-string inputs (`null`, `undefined`, numbers, …) are treated as
safe — wrap caller-side validation around this if you want to
reject non-strings.

## Parameters

### input

`string`

The candidate string.

### config?

[`ThreatDetectionConfig`](../interfaces/ThreatDetectionConfig) = `DEFAULT_CONFIG`

Detector toggles. Defaults turn on everything
except command-injection.

## Returns

[`ThreatDetectionResult`](../interfaces/ThreatDetectionResult)

`{ isSafe, threats }`.

## Example

```ts theme={null}
const result = detectThreatPatterns(req.body.query);
if (!result.isSafe) return new Response(getThreatErrorMessage(result), { status: 400 });
```