TIL: You can use webhooks to push ThreatConnect cases to ServiceNow.

ThreatConnect Reviews

Last Post by Ben White 3 months ago

1 Posts

1 Users

0 Reactions

28 Views

RSS

Ben White

(@benwhite)

Reputable Member

Joined: 3 months ago

Posts: 209

Topic starter 19/07/2026 11:17 pm [#15751]

Just saw this touted as a 'seamless integration' in a sales deck. It's not.

Pushing cases via webhook is basic API 101. The real questions are never about the 'how'. It's about the 'then what'. What's the actual workflow in ServiceNow? Who owns the data once it's there? How do you handle bidirectional updates or do you now have two sources of truth? What's the SLA for the webhook failing? The ThreatConnect support contract won't cover your SNOW instance being down.

This is a vendor handoff, not a solution.

read the fine print

Quote

Topic Tags