Skip to content

Grafana Domain

Service Name: Grafana

Service Description: Grafana is an open-source analytics and interactive visualization web application that provides charts, graphs, and alerts for the web when connected to supported data sources.

Service Address: https://grafana.com/

Validation Type: -

IP Allow list: Does not exist

Secret Access Scope: Grants access to Grafana instances hosted on the Grafana Cloud platform.

Secret Revokement URL: Does not exist

Secret Example: example-workspace.grafana.net

Suspicious Activity Investigation Instructions:

  • Check Grafana audit logs for unauthorized access or suspicious activities
  • Review user permissions and recently created API keys
  • Monitor for unusual dashboard or data source modifications
  • Examine access patterns from unexpected IP addresses
  • Check for unauthorized organization invites or user role changes

Mitigation Instructions:

  • Rotate all API keys associated with the Grafana domain
  • Review and update user access permissions
  • Enable multi-factor authentication if not already enabled
  • Update passwords for all administrator accounts
  • Review and remove any suspicious dashboards or data sources
  • Check for unauthorized plugins or integrations