Skip to main content

Crowdstrike integration

Mark Glinski
  • Updated

In this article:

    Integrate CrowdStrike and SecurityScorecard to expand the capabilities and insights of both platforms:

    • In CrowdStrike: Get access to the SecurityScorecard Context Enrichment card, which shows the overall and factor-level scores for any domain. Also, if you do not have a SecurityScorecard account, you can set up a free one as part of the integration .  

      crowsdstrike-cs-results.png

    • In SecurityScorecard: See four new informational issue types that show the number of vulnerabilities for different severity levels that the the integration discovers behind your firewall:
        • Internal Low-severity CVE
        • Internal Medium-severity CVE
        • Internal High-severity CVE
        • Internal Critical-severity CVE
      Note: These issue types are only visible to the organization that owns a given Scorecard. They are updated daily, and their historical totals are also visible. Also, these issue types are informational and do not impact your score.

    Install the integration app in CrowdStrike

    Before you install, make sure you have a CrowdStrike account.

    1. In CrowdStrike, select CrowdStrike Store and then Partner Apps from the top-left menu.

      crowdstrike-cs-top-left-menu.png

      crowsdstrike-cs-store.png

    2. Find and select the SecurityScorecard app card.
    3. Within the application details page, click on the Try it free button to start the installation.

      crowsdstrike-cs-try-free.png

    4. In the dialog that appears:
      • Enter your SecurityScorecard API key and Portfolio ID if you have SecurityScorecard account.
        or
      • If you don't have a SecurityScorecard account, select I don’t have API credentials
        Then click Agree & Request Trial.

        crowdstrike-cs-request-trial.png

    You will receive an email confirming the installation.

    Note: If you do not have a SecurityScorecard account, the SecurityScorecard Customer Success team will contact you and help you get started using the platform. However, you do not need a SecurityScorecard account to use this integration app in CrowdStrike. 

    Use the integration in CrowdStrike

    Note: After installation, it may take a few minutes for SecurityScorecard data to appear in CrowdStrike.

    After installing the integration in CrowdStrike, you can start using a content enrichment card:

    1. In CrowdStrike, use the top search bar to find for domains of interest.

      crowsdstrike-cs-domains-of-interest.png

    2. In the search result, select the SecurityScorecard tab to see the overall grade and score, plus the factor-level scores.
      Tip: If you have a SecurityScorecard account, you can see more detailed information about the domain when you click See more on SecurityScorecard.

      crowsdstrike-cs-results.png

    Install the integration app in SecurityScorecard

    Note: If you created a SecurityScorecard account when you installed the integration in CrowdStrike, your account already has the CrowdStrike application preinstalled.

    Before you install, make sure you have the following:

    • A SecurityScorecard account
    • A CrowdStrike account (See the following to obtain account information that you will need for the installation in SecurityScorecard.)

    Generate client ID, secret, and base url

    1. In CrowdStrike, select Support and then API Clients and Keys from the top menu.

      crowsdstrike-cs-api.png

    2. Click Add new API client.

      crowsdstrike-cs-api-client.png

    3. In the dialog that appears, enter any client name and description and select scopes. Select Spotlight vulnerabilities to successfully grant the correct permissions to this set of credentials. Then click ADD.
    4. In the next dialog that appears, copy your client ID, secret, and base url. Then click DONE.

    Next, install the integration app n SecurityScorecard:

    1. Select Marketplace from the top menu in the SecurityScorecard platform.

      marketplace-off-dashboard.png

    2. On the Marketplace page, start typing the name of the app and then select Crowdstrike.

      crowsdstrike-ssc-marketplace-listing.png
    3. In app details page, click Install.

      crowsdstrike-ssc-install.png

    4. When prompted, click Allow so that the app can access to your username, email, and organization.

      crowsdstrike-ssc-allow.png

    5. When prompted, enter your CrowdStrike credentials. Then click Continue.

      crowsdstrike-ssc-credentials.png

    The installation completes shortly afterward.

    Use the integration in SecurityScorecard

    Note: After installation, it may take a few minutes for CrowdStrike issue types to appear.

    To see CrowdStrike issue types in your Scorecard:

    1. In SecurityScorecard, go to My Scorecard.

      select-my-scorecard.png

    2. Select the Application Security factor. 
      Any available CrowdStrike signals appear in an Informational Signals section for that factor.
      or
      Go to the Issues page to see view CrowdStrike issue types. 

      crowsdstrike-ssc-see-issues.png

    3. Click any issue type to view more information about it, including the number of findings.

      crowsdstrike-ssc-findings.png

    4. On the Details page, click any finding to go to CrowdStrike’s Spotlight dashboard, where you can see the complete list of issues in full detail.

    Get help

    If you need help or have questions, submit a Support request.

    Related articles