With our Drata integration you can send scan reports directly to the Reports & Docs section of Drata, streamlining and simplifying your compliance process.
Adding the integration
On the Drata Site
Log in to https://app.drata.com > Click on your profile name > Settings
Select API Keys
Click 'Create API Key':
Fill out the Create API Key Form using the guidance below and be sure to save it:
Expiration Date: We recommend a long expiration date so that your integration does not unexpectedly stop working
The following scopes must be enabled:
Read:
Personnel list;List workspaces;Controls List;List evidenceWrite:
Add evidence;Update evidence
Copy the API Key and save it somewhere secure!
Intruder Portal
Go to the Intruder Integrations page > Drata integration:
Paste the API key, enter the region (North America/Europe) and click Connect:
If you see the following error message, please confirm your Drata region and hit the 'Try Again' button:
Select the
workspaceyou want the vulnerability reports to be sent to and the user you want to be marked as theowner.Select
Quarterly Vulnerability Scan (DCF-18)
(If you don't see it show up, simply search DCF-18 and select it that way. This shouldn't be an issue, unless you have changed the control name in your environment).Select the
Owner.
Your integration is now set up!
Manually send reports to Drata
There are two places you can upload reports from.
Scans Overview Page
Choose the Scan you wish to use as evidence for your compliance > click the Ellipsis icon (…), and chooseSend To Drata:
Scan's detail page
Simply hitSend toDrata:
This process will take a few seconds for the report to be prepared and sent.
Once complete you will see a screen like the one below:
Inside Drata, reports will appear under
Evidence library.
NB: Each time a new report is sent from Intruder, it will update the 'Current version', moving the previous version to 'Version history':
If any errors occur during the process, you will find a modal appear, similar to the one shown below:
Any additional data on the error that has occurred will be shown in the field below.
Automatically send reports to Drata
Existing scans (must be a recurring scan)
Head to the Scans page > Navigate to Scheduled scans on the right-hand side> Select the ellipsis of the scan you wish to automate for compliance > Press
Edit:
Assuming you're happy with the repetition frequency (daily, weekly, monthly or quarterly), you can just toggle
Auto send to Drata>Update scan:
The scheduled scan will now show 'Send to Drata':
New scans (must be a recurring scan)
Head to the scans page > click
+ Schedule scan:
Choose the targets you wish to scan
The date you'd like the first scan to run
The time you'd like it to run
Preferred repetition frequency: daily, weekly, monthly or quarterly.
One-off scans cannot be automatically sent to Drata, these can still be sent manually
Toggle
Auto send to DrataGive the scan a name
Hit
Schedule scan
The scheduled scan will now show 'Send to Drata':
Note: The Drata integration is available for users on Pro, Premium and Vanguard plans.