Vulcan Cyber
Introduction
This guide tells you how to authenticate the Vulcan Cyber connector in Swimlane using HTTP Bearer Token Authentication.
You will generate an API token in Vulcan Cyber, collect the required connection details, and configure the connector in Swimlane.
Prerequisites
Vulcan Cyber Access Requirements
You must have permissions to:
- Access the Vulcan Cyber portal.
- Generate and manage API tokens.
- Access the Vulcan Cyber REST API.
- View vulnerability data.
Required Credentials
During setup, you will collect:
- Vulcan Cyber URL
- API Token
Vulcan Cyber Setup
Take the following steps to generate an API Token:
- Log in to your Vulcan Cyber portal.
- Click your Profile or User Settings.
- Navigate to API Tokens.
- Click Create API Token.
- Enter a descriptive name for the token.
- (Optional) Configure an expiration date and assign the required permissions.
- Click Create.
- Copy and securely save the generated API token.
This saved value is your Bearer Token.
Take the following steps to collect the Vulcan Cyber URL:
- Log in to your Vulcan Cyber tenant.
- Copy the URL displayed in your browser.
Example:
https://customer.vulcan.io
Use this value as the url during connector configuration.
Connector Configuration in Swimlane
- Log in to Turbine.
- From the left-hand navigation pane, click ORCHESTRATION and click Assets.
- Asset homepage opens.
- Click the plus icon to open the Configure your Connector Asset window.
- Select Vulcan Cyber from the Asset type list.
- Fill in the Asset Settings and Asset Input as shown:
Field | Description | Required/Optional |
|---|---|---|
url | Vulcan Cyber instance URL | Required |
token | API Bearer Token | Required |
verify_ssl | Enable/Disable SSL Verification | Optional |
http_proxy | Optional proxy configuration | Optional |
Fields with * marks are required.
- Click Create.
Troubleshooting
Authentication Failed (401 Unauthorized)
Verify that:
- The API token is correct.
- The API token has not expired.
- The API token has not been revoked.
- The URL points to the correct Vulcan Cyber tenant.
Permission Denied (403 Forbidden)
Verify that:
- The API token has permission to access vulnerability data.
- Your account has access to the required assets and vulnerabilities.
- Your organization has enabled API access.
Unable to Connect
Verify that:
- The Vulcan Cyber URL is correct.
- The Vulcan Cyber instance is reachable.
- Firewall or proxy settings allow outbound HTTPS traffic.
SSL Errors
If SSL verification fails:
- Verify that the Vulcan Cyber endpoint uses a trusted SSL certificate.
- Confirm that any corporate proxy is not intercepting SSL traffic.
- Disable verify_ssl only for testing if permitted by your organization's security policy.
Result
You have successfully authenticated the Vulcan Cyber connector in Swimlane.
Sources
- Vulcan Cyber API Documentation https://help.vulcancyber.com/en/articles/3438656-working-with-vulcan-apiο»Ώ
- Vulcan Cyber API Reference https://apidocs.vulcan.io/ο»Ώ
- Vulcan Cyber Help Center https://help.vulcancyber.com/ο»Ώ