Skip to main content


The watchTowr integration adds visibility about continuous Automated Red Teaming and Attack Surface Management. This integration enables JupiterOne users to better manage assets, assess risks, and respond to incidents more effectively by leveraging watchTowr's findings.


To use this integration, JupiterOne requires a watchTowr API Token. The process to obtain credentials is following:

  1. Login into watchTowr using your login credentials
  2. Click the 'Integrations' menu option
  3. Under 'Client API' section click on 'Client API'
  4. Click on 'Regenerate New API Token', you will see the generated token under 'API Authentication' section.

In the API Whitelist Management section, please turn off whitelisting or contact JupiterOne support to get our list of outbound IPs used for integrations.

Configuration in JupiterOne

To install the watchTowr integration in JupiterOne, navigate to the Integrations tab in JupiterOne and select watchTowr. Click New Instance to begin configuring your integration, providing the following:

  • API Token: unique identifier used to authenticate and control access to watchTowr API. You should be able to find it here. If you don't have one yet see above section to generate one.

  • Account Name used to identify the watchTowr account in JupiterOne.

  • Description to assist in identifying the integration instance, if desired.

  • Vulnerability Filters: here you will be able to customize what severities you want to fetch when retrieving findings.

  • Polling Interval that you feel is sufficient for your monitoring needs. You may leave this as DISABLED and manually execute the integration.

Click Create once all values are provided to finalize the integration.

Next steps

Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.