REST API
The Platform’s public API enables automation of case management through a RESTful interface. It allows customers to fetch, for example, incidents posted to the customer from the Managed Detection & Response service. The most common use case is to bring the incidents, or other entities from Truesec’s managed services, into a customer’s ITSM/ticketing system.
The API supports update of Incident Status and Closure Note to ensure alignment with Truesec SOC. The API Portal and the relevant documentation is located at https://api.soc.truesec.app/.
Integration is done by customer, or customer’s third party, towards the API. To use the API, Truesec needs to provide Client ID and Client Secret to a customer administrator.
Accessing incidents and updating incident Status and Closure Notes may also be done through the customer Portal (https://soc.truesec.app) by stakeholders, according to user role.
The Portal supports multiple customer user roles with permissions ranging from multi-service access, single-service access to roles with restricted access to Incidents & Alerts only, intended for remote service desk functions.