Webhook

Access Levels: Advanced | Enterprise

In Censys Attack Surface Management (ASM), configure a Webhook integration to send risk events as a JSON payload to custom destinations.

Example JSON payload

This is an example of what an output looks like:

{
  "event": {
    "id": "9472333883494777",
    "specversion": "1.0",
    "type": "risk_instance_opened",
    "source": "censys",
    "time": "2024-04-17T20:39:09.278+00:00",
    "subject": "risk instance opened",
    "datacontenttype": "application/json; charset=utf-8",
    "data": {
      "workspace_id": "censys_workspace_id",
      "risk_event_id": 550,
      "risk_id": 10,
      "risk_name": "eol-openssl-software",
      "risk_description": "EOL OpenSSL Software",
      "last_seen_at": "2024-01-08T23:03:00.000+00:00",
      "first_seen_at": "2024-01-08T23:03:00.000+00:00",
      "risk_severity": "medium",
      "impacted_asset": "Host: 1.1.1.1",
      "categories": "[[\"Vulnerability\",\"Software Vulnerability\",\"EOL Software Vulnerability\"]]",
      "link": "https://app.censys.io/hosts/1.1.1.1/risks"
    }
  }
}

Configure the integration in Censys ASM

1. Go to the Censys ASM web console and click Integrations.
2. Locate Webhook Connection and click Set Up.
3. On the Authentication page, configure the following:

   1. Webhook URL: Enter the webhook URL you want to send notifications to.

   2. Authentication type: Select the authentication type you wish to use for the webhook connection.

      
4. Click Connect, then click Next Step.
5. On the Default Set Up page, review your settings. Note that these fields cannot be edited.
6. Click Next Step.
7. On the Filters page, select the risk severities you want to send alerts for.
8. Click Submit, then click Close.

Modify the integration

If you need to make changes to your integration settings:

1. Go to the Censys ASM web console and click Integrations.
2. Locate Webhook Connection and click Manage.
3. Go through the setup wizard, as described in the section above, and make any necessary changes.