Integrations

Org admins can configure 3rd-party integrations in NodeZero to seamlessly connect tools and workflows with our systems, which can include:

• Ticketing platform APIs and Webhooks for Vuln Management. Platforms supported:
  • Jira
  • ServiceNow (coming soon)
• Webhooks for Tripwires:
  • Splunk
  • Sentinel

Configure Vuln Management APIs

1. Navigate to the Settings page

Click the user profile button in the top right of Portal. Then in the dropdown, click Settings

2. Navigate to the Integrations page

From the subnav, click Integrations.

3. Start Configuration

In the NodeZero APIs section, choose a ticketing platform from the list. Then press the + button for that platform.

4. Save and Test Configuration

Enter the info required for the configuration:

• Domain URL: URL to your instance of the ticketing platform (e.g. https://demoproject.atlassian.net)
• Project Key or Table Name: Enter the project key to the board where tickets will be dispatched. Project keys are used to prefix tickets (e.g. NZDEMO-1 is a ticket in the project NZDEMO)
• API Key: Token generated in ticketing platform. For more instructions on how to create an API key for the integration, see Set Up API Key in Jira.
• Email Email associated with the API key from above. Doesn't need to be the email address associated with the NodeZero account.
• Only org admins can create and manage remediation tickets: Select whether only org admins can dispatch tickets or if all users within the org can.

Then, click Save and Test.

5. Configure Webhooks

Once the API integration is successfully saved and tested, open up the details for the existing Vuln Management integration. Click Set Up Webhook.

A URL is provided to use when setting up a Webhook. For more instructions on how to create a Webhook for the integration, see Set Up Webhook in Jira.

Once the Webhook is created in the ticketing platform, copy the token and paste in the form's required field.

Appendix

Set Up API Key In Jira

• Go to the API Tokens page in the Atlassian account settings.
• Click Create API Token. Fill out the form and click Create.
• Once created, copy the API token to paste in the Save and Test Configuration.

Set Up Webhook In Jira

• In Jira, go to System Settings. Under Advanced, click WebHooks.
  • You can also go directly to {url}/plugins/servlet/webhooks where {url} is the domain URL from the API integration config.
• Click Create Webhook and fill out the form.
  • URL: URL provided from the Webhook form (see Configure Webhooks)
  • Secret: Generate a secret. Then copy this field to paste in the Configure Webhooks
  • Issue Related Events:
    • In JQL, specify project = {project} where {project} is the full name of the project (not the key)
    • Check updated under Issue
• Click Create