Skip to main content

OX Security

Integrate OX Security with Torq to trigger workflows from application security findings and automate triage, enrichment, and remediation routing using API key configuration.

OX Security is an Application Security Posture Management (ASPM) and software supply chain security platform that unifies SAST, SCA, secrets detection, IaC, container, API, and pipeline scanning with code-to-cloud attack path analysis, so you can detect, prioritize, and remediate the application risks that actually matter from a single console.

Torq enables quick and easy integration with OX Security, so you can automate anything and everything within moments. Torq's pre-built OX Security steps include:

  • Get Issues

  • Get Issue

  • Get Applications

  • Get Single Application Info

  • Get App Owners

  • Get All Tags

  • Get App Tags

  • Get API Security Items

  • Check Scan in Progress

  • Run GraphQL Query

  • +5 more...

If you don't see a step you need, you can create your own in various ways, such as using the Send an HTTP Request step or Torq's Step Builder, and share it across your organization.

To trigger a Torq workflow based on events sent from OX, look here.
​

To use OX steps in Torq workflows, look here.

Use OX Security to trigger workflows in Torq

Step One: Create an OX Security trigger integration in Torq

  1. Navigate to integration: In Torq, go to Build > Integrations > Triggers > OX Security and click Add Instance.

  2. Configure the integration:

    1. Give the integration a unique and meaningful name.

    2. Click Add.

  3. Save information: Copy and save the webhook URL. You'll need it in OX Security.

Step Two: Add the webhook in OX Security

  1. Navigate to workflows: In the OX Security console, go to Workflows > Regular Scan Workflows and click Create New Workflow.

  2. Give the workflow a name and description, then click Create.

  3. Select a trigger for when you want to send events to Torq.

  4. In the left panel under Action > Notification, drag in the Webhook tile.

  5. Configure the webhook:

    1. URL: Paste the webhook URL you copied from Torq.

    2. For the request type, select POST.

    3. Under Apply To, select the appropriate value for which issues to send to Torq (New, Updated or Existing Issues is recommended).

  6. Click Add.

  7. Finalize: Ensure the workflow is active by selecting the toggle next to the workflow name.

Use OX Security steps in a Torq workflow

Step One: Generate an OX Security API key

  1. Navigate to API keys: In the OX Security console, go to Settings > API Key and click Create API Key.

  2. Create a key:

    1. API Key Name: Give the key a unique and meaningful name.

    2. API Key Type: Select API Integration.

    3. Role: Assign a role that grants the permissions required for the steps you want to run. The key can only call the APIs its role allows.

    4. Scope: Select Entire organization, or select Custom to limit the key to specific app owners and tags.

    5. Expiration Date: Set an expiration date. The key stops authenticating after this date.

  3. Finalize: Click to create the key.

  4. Save information: Copy and save the API key. Be sure to save it somewhere, you cannot access it again after closing the dialog.

Step Two: Create an OX Security Steps integration in Torq

  1. Navigate to integration: In Torq, go to Build > Integrations > Steps > OX Security and click Add Instance.

  2. Set up integration:

    1. Instance name: Give the integration a unique and meaningful name.

    2. API Key: Paste the API key you copied earlier.

  3. Finalize: Click Add to save.

Related Articles
Did this answer your question?