---
title: CTM360 CyberBlindSpot
slug: connectors/ctm360-cyberblindspot
docTags: 
createdAt: 2026-06-09T16:30:27.748Z
---

CTM360 CyberBlindSpot is a cybersecurity platform that provides visibility and control over external digital threats.

CTM360 CyberBlindSpot is a comprehensive digital risk management platform designed to identify and mitigate cyber threats. This connector allows Swimlane Turbine users to automate key actions such as closing incidents, requesting asset takedowns, and listing incidents directly from CTM360 CyberBlindSpot. By integrating with CTM360 CyberBlindSpot, users can streamline incident management processes, enhance response times, and improve overall security posture through automated workflows within the Swimlane platform.

## Prerequisites

Before you can use the CTM360 CyberBlindSpot connector for Turbine, you'll need access to the CTM360 API. This requires the following:

- an API key authentication using the following parameters:
  - URL: The endpoint URL for accessing the CTM360 API.
  - API Key: A unique key provided by CTM360 for authenticating API requests.

## Capabilities

This Connector provides the following capabilities:

- Close Incident
- Incident Request Takedown
- List Incident

## Additional Documentation

- [CTM360 CyberBlindSpot Connector Documentation](https://docs.swimlane.com/connectors/ctm360-cyberblindspot)
- [CTM360 CyberBlindSpot API Documentation](https://api.ctm360.com/)

# Configurations

## API Key Authentication

Authenticates using an API Key

### Configuration Parameters

| **Parameter** | **Description**                    | **Type** | **Required** |
| ------------- | ---------------------------------- | -------- | ------------ |
| url           | A URL to the target host.          | string   | Required     |
| api-key       | API key                            | string   | Required     |
| verify\_ssl   | Verify SSL certificate             | boolean  | Optional     |
| http\_proxy   | A proxy to route requests through. | string   | Optional     |

# Actions

## Close Incident

Close a CBS incident in CTM360 CyberBlindSpot using the ticketId provided in the JSON body.

### Endpoint

- **URL:** `/api/v2/incidents/close_incident`
- **Method:** `POST`

### Input

| **Argument Name** | **Type** | **Required** | **Description**   |
| ----------------- | -------- | ------------ | ----------------- |
| `ticketId`        | string   | Optional     | Unique identifier |

### Input Example

`{"json_body":{"ticketId":"COMX41148897294"}}`

### Output

| **Parameter** | **Type** | **Description**                      |
| ------------- | -------- | ------------------------------------ |
| `status_code` | number   | HTTP status code of the response     |
| `reason`      | string   | Response reason phrase               |
| `statusCode`  | number   | Status value                         |
| `success`     | boolean  | Whether the operation was successful |
| `message`     | string   | Response message                     |

### Output Example

`{"status_code":200,"response_headers":{"Content-Type":"application/json; charset=utf-8","Content-Length":"81","Connection":"keep-alive","Date":"Wed, 03 Apr 2024 06:30:55 GMT","Server":"nginx","Vary":"Origin","Access-Control-Allow-Credentials":"true","ETag":"W/\"51-AwoX9vBGKnj2Dj2bqiC/jDmp5Dg\"","X-Cache":"Error from cloudfront","Via":"1.1 719a8a3051824d9bf82ea46b74aff862.cloudfront.net (CloudFront)","X-Amz-Cf-Pop":"BOM78-P4","X-Amz-Cf-Id":"kjVSm-yq3EQ9kdInPe0mo4XqAVOMBz8haT76sPYTqz5F4Hic2GAAmg==...`

## Incident Request Takedown

Request a takedown of the asset where the incident was found in CTM360 CyberBlindSpot using the ticketId.

### Endpoint

- **URL:** `/api/v2/incidents/request_takedown`
- **Method:** `POST`

### Input

| **Argument Name** | **Type** | **Required** | **Description**   |
| ----------------- | -------- | ------------ | ----------------- |
| `ticketId`        | string   | Optional     | Unique identifier |

### Input Example

`{"json_body":{"ticketId":"COMX415993788418"}}`

### Output

| **Parameter** | **Type** | **Description**                      |
| ------------- | -------- | ------------------------------------ |
| `status_code` | number   | HTTP status code of the response     |
| `reason`      | string   | Response reason phrase               |
| `statusCode`  | number   | Status value                         |
| `success`     | boolean  | Whether the operation was successful |
| `message`     | string   | Response message                     |

### Output Example

`{"status_code":200,"response_headers":{"Content-Type":"application/json; charset=utf-8","Content-Length":"81","Connection":"keep-alive","Date":"Tue, 02 Apr 2024 10:46:04 GMT","Server":"nginx","Vary":"Origin","Access-Control-Allow-Credentials":"true","ETag":"W/\"51-AwoX9vBGKnj2Dj2bqiC/jDmp5Dg\"","X-Cache":"Error from cloudfront","Via":"1.1 42a0bfce97a174e5c6d2b115346fb472.cloudfront.net (CloudFront)","X-Amz-Cf-Pop":"HYD50-C2","X-Amz-Cf-Id":"CeAXU8ehhoapmfoRCSs4t_zDkPzjcfakTY6Nz2zAcnSPX9IHyZMCig==...`

## List Incident

Get the list of incidents from CTM360 CyberBlindSpot.

### Endpoint

- **URL:** `/api/v2/incidents`
- **Method:** `GET`

### Input

| **Argument Name**     | **Type** | **Required** | **Description**                         |
| --------------------- | -------- | ------------ | --------------------------------------- |
| `parameters.dateFrom` | string   | Optional     | Parameters for the List Incident action |
| `parameters.dateTo`   | string   | Optional     | Parameters for the List Incident action |
| `parameters.maxHits`  | number   | Optional     | Parameters for the List Incident action |
| `parameters.order`    | string   | Optional     | Parameters for the List Incident action |

### Input Example

`{"parameters":{"dateFrom":"23-10-2023 07:00","dateTo":"23-10-2023 23:00","maxHits":2,"order":"asc"}}`

### Output

| **Parameter**                | **Type** | **Description**                      |
| ---------------------------- | -------- | ------------------------------------ |
| `status_code`                | number   | HTTP status code of the response     |
| `reason`                     | string   | Response reason phrase               |
| `statusCode`                 | number   | Status value                         |
| `success`                    | boolean  | Whether the operation was successful |
| `message`                    | string   | Response message                     |
| `incident_list`              | array    | Unique identifier                    |
| `incident_list.id`           | string   | Unique identifier                    |
| `incident_list.subject`      | string   | Unique identifier                    |
| `incident_list.severity`     | string   | Unique identifier                    |
| `incident_list.type`         | string   | Unique identifier                    |
| `incident_list.class`        | string   | Unique identifier                    |
| `incident_list.status`       | string   | Unique identifier                    |
| `incident_list.coa`          | string   | Unique identifier                    |
| `incident_list.remarks`      | string   | Unique identifier                    |
| `incident_list.created_date` | string   | Unique identifier                    |
| `incident_list.updated_date` | string   | Unique identifier                    |
| `incident_list.brand`        | string   | Unique identifier                    |
| `incident_list.timestamp`    | number   | Unique identifier                    |
| `count`                      | number   | Count value                          |

### Output Example

`{"status_code":200,"response_headers":{"Content-Type":"application/json; charset=utf-8","Content-Length":"2871467","Connection":"keep-alive","Date":"Tue, 02 Apr 2024 11:11:49 GMT","Server":"nginx","Vary":"Origin","Access-Control-Allow-Credentials":"true","ETag":"W/\"2bd0ab-FoqLqmLu7kR3BqpP/D80n0i/HPU\"","X-Cache":"Miss from cloudfront","Via":"1.1 c3c13380d1c5bf8586d7fd3d4dbe9502.cloudfront.net (CloudFront)","X-Amz-Cf-Pop":"HYD50-C2","X-Amz-Cf-Id":"sbywlgQDKcgDNpnhYkdGAx2fHdPajVulr9iqKq7EJXsWSiT2...`

# Response Headers

| **Header**                       | **Description**                                          | **Example**                                                      |
| -------------------------------- | -------------------------------------------------------- | ---------------------------------------------------------------- |
| Access-Control-Allow-Credentials | HTTP response header: Access-Control-Allow-Credentials   | true                                                             |
| Connection                       | HTTP response header: Connection                         | keep-alive                                                       |
| Content-Length                   | The length of the response body in bytes                 | 81                                                               |
| Content-Type                     | The media type of the resource                           | application/json; charset=utf-8                                  |
| Date                             | The date and time at which the message was originated    | Tue, 02 Apr 2024 11:11:49 GMT                                    |
| ETag                             | An identifier for a specific version of a resource       | W/"51-AwoX9vBGKnj2Dj2bqiC/jDmp5Dg"                               |
| Server                           | Information about the software used by the origin server | nginx                                                            |
| Vary                             | HTTP response header: Vary                               | Origin                                                           |
| Via                              | HTTP response header: Via                                | 1.1 42a0bfce97a174e5c6d2b115346fb472.cloudfront.net (CloudFront) |
| X-Amz-Cf-Id                      | HTTP response header: X-Amz-Cf-Id                        | sbywlgQDKcgDNpnhYkdGAx2fHdPajVulr9iqKq7EJXsWSiT2Tz\_PFw==        |
| X-Amz-Cf-Pop                     | HTTP response header: X-Amz-Cf-Pop                       | BOM78-P4                                                         |
| X-Cache                          | HTTP response header: X-Cache                            | Error from cloudfront                                            |
