Integrations

Defused TF supports multiple integration methods so you can route alerts, summaries, and telemetry into your existing communication or automation workflows.

Slack

You can configure Slack integrations to send notifications based on selected event criteria
(e.g., severity, decoy type, or specific payload indicators).

For Business accounts, Slack can also deliver hourly anomaly summaries generated by the Anomaly Detection module.

Email

Email notifications can be triggered based on event filters or severity thresholds.
This allows alerts to be forwarded to security distribution lists or ticketing systems.

Webhooks

Webhooks can be configured to deliver event data to any HTTP endpoint.
You can define triggers based on event parameters and process incoming JSON in SIEMs, SOAR platforms, or custom automation pipelines.

API

Full API documentation will be available soon.

In the meantime, TF Business users receive separate API instructions that include authentication details, endpoint definitions, and usage examples.