Huntress and Nine Minds release AlgaPSA integration that turns SOC incident reports into PSA tickets via Huntress API
This vendor blog post from Huntress describes a new integration between the Huntress platform and AlgaPSA, the professional services automation (PSA) product from Nine Minds. Nine Minds built it in a few days using only the public Huntress API documentation. When the Huntress SOC publishes an incident report, it is created as a ticket on a dedicated security board in AlgaPSA with a severity-based priority, and the ticket can close automatically when the SOC closes the incident. The article is product and partner news and describes no vulnerability, attack or threat activity. It also gives an overview of wider Huntress API capabilities, including Webhooks and an MCP server.
Technical Details
- Incident reports are pulled from Huntress at an interval of 1 to 60 minutes set by the user, so tickets are not created instantly.
- Setup involves connecting Huntress API credentials, mapping Huntress organizations to AlgaPSA clients, and choosing the target board and severity-to-priority mapping for Critical, High and Low.
- Incidents from unmapped clients go to a fallback triage board.
- Huntress API keys are tied to a user and mirror that user's permissions.
- The integration is part of AlgaPSA Enterprise Edition (also offered as AlgaPSA Pro), not the open-source Community Edition.
- Other API capabilities mentioned: real-time Webhooks, approving or rejecting remediations through the Incident Report response API, host isolation through the Agents API, programmatic organization management, billing and stats reporting, and an MCP server for AI assistants.
Remediation
No remediation is needed. As a security practice, the article advises creating a dedicated API key for this integration so that its permissions are scoped to that use.
Linha do tempo
-
Huntress and Nine Minds release AlgaPSA integration that turns SOC incident reports into PSA tickets via Huntress API
ler a análise desta fonte ocultar
This vendor blog post from Huntress describes a new integration between the Huntress platform and AlgaPSA, the professional services automation (PSA) product from Nine Minds. Nine Minds built it in a few days using only the public Huntress API documentation. When the Huntress SOC publishes an incident report, it is created as a ticket on a dedicated security board in AlgaPSA with a severity-based priority, and the ticket can close automatically when the SOC closes the incident. The article is product and partner news and describes no vulnerability, attack or threat activity. It also gives an overview of wider Huntress API capabilities, including Webhooks and an MCP server.
Technical Details
- Incident reports are pulled from Huntress at an interval of 1 to 60 minutes set by the user, so tickets are not created instantly.
- Setup involves connecting Huntress API credentials, mapping Huntress organizations to AlgaPSA clients, and choosing the target board and severity-to-priority mapping for Critical, High and Low.
- Incidents from unmapped clients go to a fallback triage board.
- Huntress API keys are tied to a user and mirror that user's permissions.
- The integration is part of AlgaPSA Enterprise Edition (also offered as AlgaPSA Pro), not the open-source Community Edition.
- Other API capabilities mentioned: real-time Webhooks, approving or rejecting remediations through the Incident Report response API, host isolation through the Agents API, programmatic organization management, billing and stats reporting, and an MCP server for AI assistants.
Remediation
No remediation is needed. As a security practice, the article advises creating a dedicated API key for this integration so that its permissions are scoped to that use.