Ctrlk
ProductBook a demoOpen app
linkedinyoutube
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Adaptive Shield

Connect Adaptive Shield to Radiant Security to forward SaaS security posture alerts for AI triage.

Adaptive Shield is a SaaS Security Posture Management (SSPM) platform that monitors SaaS applications for misconfigurations, identity risks, and threat activity that can lead to account takeover, data exposure, and unauthorized access. Connecting Adaptive Shield forwards SaaS security and audit alerts to Radiant Security via webhook, using Adaptive Shield's Splunk HTTP Event Collector (HEC) event destination. Radiant uses these alerts to surface SaaS-layer threats during AI triage, correlating posture and identity signals with endpoint, network, and email activity already in the pipeline.

Prerequisites

Add the data connector in Radiant Security

  1. Log in to Radiant Security.

  2. From the navigation menu, select Settings > Data Connectors and click + Add Connector.

  3. Search for and select Adaptive Shield Webhook, then click Data Feeds.

  4. Under Select your data feeds, select Adaptive Shield Webhook and click Credentials.

  5. In the Credential Name field, enter an identifiable name (e.g., Adaptive Shield webhook credentials).

  6. In the Connector tag field, enter any string. Radiant uses this value as salt when generating the authentication token for your connector.

  7. Click Add Connector.

  8. On the Data Connectors page, find the new connector and click View Details. Under Vendor Configuration, copy and save the Webhook URL and Token. You will paste both into the Adaptive Shield console in the next section.

Configure Adaptive Shield to forward security events

  1. Log in to the Adaptive Shield console.

  2. Navigate to Settings > Event Destination.

  3. Click Add a New Event Destination.

  4. Select Splunk.

  5. Enter a name for the integration (e.g., RadiantSecurityConnector).

  6. Enter the following details:

    • HEC URL: Paste the Webhook URL you copied from Radiant Security.

    • Token: Paste the Token you copied from Radiant Security.

  1. Click Next, then click Test the connection.

  2. Click Finish.

Verify ingestion

After Adaptive Shield begins forwarding, confirm events are reaching Radiant.

  1. In Radiant, navigate to Log Management.

  2. Filter by rs_connectorType:"adaptive_shield_webhook".

  3. Confirm recent events appear.

Allow several minutes for events to be parsed, indexed, and available for search.

PreviousData Security & Insider ThreatNextAirlock Digital

Last updated

Was this helpful?