Skip to content
Find out how we support MDR.



You must have the Network integrations license pack to use this feature.

You can integrate Secutec with Sophos Central so that it sends data to Sophos for analysis.

This is an API integration. You need an API token and URL from Secutec.

The key steps are as follows:

  • Get an API token from Secutec.
  • Add an integration in Sophos Central.

Get an API token

You must be Organization Manager to set up this integration.

To get the API token, do as follows:

  1. Sign in to Secutec as Organization Manager.
  2. Go to Users

    Users menu.

  3. Click the arrow next to Create and select Technical User.

    Create menu.

  4. Select your organization, enter a name, and enter an end date for the user account's validity.

    New technical user details.

  5. Copy the Access token and save it.

    The token is shown once only. You can't get it back later. but you can change it if necessary.

    Access token.

The new user is shown in the user list. If you need to change the token or the validity end date, you must be signed in as that user.

Add an integration

To integrate Secutec with Sophos Central, do as follows:

  1. In Sophos Central, go to Threat Analysis Center > Integrations > Marketplace.
  2. Click Secutec.

    The Secutec page opens. You can configure integrations here and see a list of any you've already configured.

  3. In Data Ingest (Security Alerts), click Add Configuration.


    If this is the first integration you've added, we'll ask for details about your internal domains and IPs. See My domains and IPs.

  4. In Integration steps, do as follows:

    1. Enter a name and a description for the integration.
    2. Enter the Base URL.

      The URL for Secutec is

    3. Enter the API token. This is the access token you generated earlier.

  5. Click Save

We create the integration and it appears in your list.

If your integration shows as Connected, your data should appear in the Sophos Data Lake after validation.