Creating a new connection

Before you can create a new connection we need a few prerequisites: an API Key and an Organization. For more information on these two items please review our quick start guide here. The last step of the quick start describes how to create a new connection, the POST body consists of:

vendor - The Enum of the vendor product you want to connect to.
credentials - The specific credential body for the vendor you are connecting to, this is not required for Oauth based connections.
options - (Optional) Any additional options you want to pass to the connection, each vendor has different options available.

Since creating a connection requires you to have the correct combination of vendor, credentials, and options in the correct combination we have provided examples of each below.

VMS Connections

Tenable

Qualys

{
  "credentials": {
      "username": "test",
      "password": "pass",
  },
  "options": { # Optional not required
      "init_load_timestamp": "2021-01-01T00:00:00+00:00", # Timestamp to start the data pull from
  },
  "vendor": "QUALYS"
}

InsightVM

MS Defender VMS

{
  "vendor": "MS_DEFENDER_VMS",
  "options": { # Optional not required
    "oauth2_redirect_urls": { # Overried the default redirect to Leen's splash page'
      "success": "https://myapp.com/success",
      "error": "https://myapp.com/error"
    }
  }
}

More info on our OAuth flow can be found here

SentinelOne VMS

CrowdStrike Spotlight

AWS Inspector2

Direct access

{
  "credentials": {
    "aws": {
      "aws_access_key_id": "access_key_id",
      "aws_secret_access_key": "secret_key",
      "aws_region_name": "us-east-1",
      "type": "direct_access"
    }
  },
  "vendor": "AWS_INSPECTOR2"
}

Leen Role

{
  "credentials": {
    "aws": {
      "aws_role_arn": "role_arn",
      "external_id": "external_id",
      "aws_region_name": "us-east-1",
      "type": "leen_role"
    }
  },
  "vendor": "AWS_INSPECTOR2"
}

Role Chaining

{
  "credentials": {
    "aws": {
      "aws_role_arn": "role_arn",
      "external_id": "external_id",
      "aws_region_name": "us-east-1",
      "type": "role_chaining"
    }
  },
  "vendor": "AWS_INSPECTOR2"
}

Wiz VMS

EDR Connections

MS Defender Endpoint

{
  "vendor": "MS_DEFENDER_ENDPOINT",
  "options": { # Optional not required
    "oauth2_redirect_urls": { # Overried the default redirect to Leen's splash page'
      "success": "https://myapp.com/success",
      "error": "https://myapp.com/error"
    }
  }
}

More info on our OAuth flow can be found here

SentinelOne Endpoint

CrowdStrike Falcon

AppSec Connections

Snyk

{
    "vendor": "SNYK",
    "options": { # Optional not required
        "oauth2_redirect_urls": { # Overried the default redirect to Leen's splash page'
          "success": "https://myapp.com/success",
          "error": "https://myapp.com/error"
        }
    }
}

More info on our OAuth flow can be found here

Semgrep

Aikido

Wiz Code

Checkmarx

{
  "credentials": {
    "base_url": "https://us.ast.checkmarx.net",
    "tenant_name": "tenant-name",
    "client_id": "client_id",
    "client_secret": "client_secret"
  },
  "vendor": "CHECKMARX"
}

Mend.io

IDP Connections

Okta

MS Entra

OAuth2

{
  "vendor": "MS_ENTRA",
  "options": { # Optional not required
    "oauth2_redirect_urls": { # Overried the default redirect to Leen's splash page'
      "success": "https://myapp.com/success",
      "error": "https://myapp.com/error"
    }
  }
}

More info on our OAuth flow can be found here

Secret

API Documentation

AppSec

EDR

VMS

CSPM

Identity Provider (IDP)

Entities

Configuration

Provisioning

Connectors

OnRamp

Enrichments

VMS Connections

EDR Connections

AppSec Connections

IDP Connections

API Documentation

AppSec

EDR

VMS

CSPM

Identity Provider (IDP)

Entities

Configuration

Provisioning

Connectors

OnRamp

Enrichments

​VMS Connections

​EDR Connections

​AppSec Connections

​IDP Connections

VMS Connections

EDR Connections

AppSec Connections

IDP Connections