Skip to content

WiseFlow API Key

Service Name: WiseFlow

Service Description: WiseFlow is a digital assessment platform used by educational institutions for managing assignments, exams, and assessments. It provides tools for digital submission, plagiarism checking, and grading of academic work.

Service Address: https://europe.wiseflow.net/

Validation Type: -

IP Allow list: Does not exist

Secret Access Scope: Grants programmatic access to WiseFlow's API, allowing integration with the assessment platform to manage assignments, users, and assessment data.

Secret Revokement URL: Does not exist (typically managed through the WiseFlow admin interface)

Secret Example: wf_api_5f7a8b9c3d2e1f0a4b5c6d7e8f9a0b1c2d3e4f5

Suspicious Activity Investigation Instructions:

  • Review access logs in the WiseFlow admin portal for unusual API activity
  • Check for unauthorized data exports or mass downloads of assessment materials
  • Monitor for unexpected user permission changes or account creations
  • Look for API calls from unusual geographic locations or outside normal working hours
  • Verify if there are any unauthorized integrations with third-party systems

Mitigation Instructions:

  • Log in to the WiseFlow admin portal
  • Navigate to the API management section
  • Revoke the compromised API key
  • Generate a new API key with appropriate permissions
  • Update any legitimate integrations with the new API key
  • Review and adjust API access permissions to follow the principle of least

privilege

  • Enable notifications for suspicious API activity if available
  • Document the incident and review security policies for API key management