Skip to content

Integrating SailPoint with Detectify

Detectify is a web application security platform that provides automated security scanning and vulnerability management. It helps organizations continuously monitor their assets for security issues, misconfigurations, and OWASP vulnerabilities. This document provides instructions to configure a new direct connection to a Detectify source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Detectify connector supports the following:

Account Management

  • Aggregate Accounts

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  • You have a Detectify account with admin-level access.
  • You have generated and stored an API Token from the Detectify platform.
  • To generate an API token, complete the following steps:
    1. Log in to your Detectify account.
    2. Go to Team Settings > API Keys.
    3. Select Create New API Key.
    4. Store the token securely, it will be used during connector configuration in SailPoint.
  • For more information about the Detectify API, refer to the Detectify REST API v2 documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

Required Permissions

  • The API token used must belong to a user with Owner or Admin role within the Detectify team. The following API access is required:
    • List Members (GET /members)