Integrating Ceeyu with third-party applications
Ceeyu enables you to receive information about new risks identified by email and/or by webhook for third-party application integration. The event-based email alert can also serve to alert a NOC.
To set this up, visit the Integrations page, which is accessible through the Profile & Preferences menu (Admins only).
⚠️ IMPORTANT ⚠️
- We send one webhook call and one email per new risk identified (corresponding to the criticality you configured to be notified for).
- Multiple email addresses can be added for the email notification, and these email addresses do not need to be associated with a Ceeyu user account)
- Emails provide both a HTML version (for your email client) as a text version (for automated processing) of the risk information
- Secret token for HMAC 256 signature is the secret token used to generate a HMAC-256 signature of the webhook payload, available in the
X-CU-Signature-256HTTP header to, validate the message's content integrity.
Data provided
For every new risk detected, the following data is provided:
| Company Name | Name of the company for which the risk was detected |
|---|---|
| Name | Name of the asset for which the risk was detected. |
| Severity | The detected risk's severity level. |
| Description | Description of the detected risk. |
| Domain | Domain for which the risk was detected. |
| Host | Hostname for which the risk was detected. |
| Source | Automated assessment. |
| Type | Attack surface scan. |
| Url | Url to the detected risk's detail page on the platform. |
Examples
JSON payload for webhook
{
"company_name": "Demo Company",
"name": "democompany.com",
"severity": "MEDIUM",
"description": "Permissions Policy is not configured for intranejsont.democompany.com. This makes the application vulnerable to MITM, XSS, clickjacking and other common web attacks. ",
"domain": "democompany.com",
"host": "intranet.democompany.com",
"source": "Automated assessment",
"type": "Attack surface scan",
"url": "https://app.ceeyu.io/risk-management/risk-detection/0x127d9eb5"
}
Email Text
Risk identified
Hello there.
A risk with the following characteristics has been identified by Ceeyu:
- Company: Demo Company
- Domain: democompany.com
- Host: intranet.democompany.com
- Severity: MEDIUM
- Source: Automated assessment
- Risk type : Attack surface scan
- Description: Permissions Policy is not configured for intranejsont.democompany.com. This makes the application vulnerable to MITM, XSS, clickjacking and other common web attacks.
- URL: https://app.ceeyu.io/risk-management/risk-detection/0x127d9eb5
Questions?
Is something wrong? or do you have an idea? never hesitate to contact.
For commercial questions: sales@ceeyu.io
For technical issues: support@ceeyu.io
For feedback and ideas: product@ceeyu.ioEmail HTML
