Huntress Expands API with Automation, Security Data and User-Scoped Keys

· Original article ↗

Summary

Huntress says its API now supports write operations for agents, organizations and user access, offers additional security and external-recon data, and replaces account-level API keys with user-based keys tied to user permissions.

Key points

  • New agent API operations can uninstall agents, change tags, toggle tamper protection, and isolate or release hosts.
  • Partners can automate organization and reseller-account creation, updates and deletion, along with user membership management.
  • New endpoints provide access to security signals, SIEM queries, incident-remediation approvals, ITDR access rules and external-recon port-scan data.
  • The updated organization endpoint returns product-specific agent, SIEM storage and ITDR identity statistics.
  • Huntress is deprecating account-level API keys in favor of multiple user-based keys whose permissions follow the assigned user's role.
  • The Reseller API adds subscription management and access to billing, invoice, line-item and usage data.

Article Details

Event Type
Huntress expanded its API into a read-and-write integration and automation platform, adding endpoint management, organization and account administration, user access management, security-data access, external reconnaissance data, and reseller billing and subscription capabilities.
Impact
Partners and resellers can automate agent lifecycle tasks, onboarding, membership and API-key administration, security workflows, external reconnaissance reporting, subscription management, and billing. User-based API keys mirror assigned user permissions, with permissions updating when the user's role changes.

People

Vendors

Products