SOCRadar Integration
by Socradar Cyber Intelligence Inc
Import SOCRadar alarms as ServiceNow incidents
Install Trend
View Install Data
| Date | Install Count | Change |
|---|---|---|
| 2026-09-09 | 0 | - |
About
SOCRadar Integration automatically imports threat intelligence alarms from SOCRadar into ServiceNow incidents. It provides bidirectional synchronization for status, comments, and severity between both platforms. Security teams can manage SOCRadar alarms directly within their existing ITSM workflows without leaving ServiceNow.
Key features:
- Automated alarm import via scheduled job (every 5 minutes)
- Bidirectional status sync (ServiceNow state changes reflect in SOCRadar)
- Comment sync (work notes sent to SOCRadar as comments)
- Severity sync (priority changes update SOCRadar alarm severity)
- Configuration page for API setup, connection testing, and import management
- Dashboard with 5 widgets for alarm visibility
- No custom tables — lightweight, zero impact on table entitlements
Key Features
- Integration with SOCRadar Incidentv4 API
- Automatic creation of Incidents from SOCRadar Alarms
- Bi-directional status synchronization
- Configurable severity mapping