---
title: Cyberint
description: ''
slug: /help/docs/platform-services/automation-service/app-central/integrations/cyberint/
canonical: https://www.sumologic.com/help/docs/platform-services/automation-service/app-central/integrations/cyberint/
---
import useBaseUrl from '@docusaurus/useBaseUrl';
})
***Version: 1.2
Updated: April 29, 2026***
Cyberint offers to proactively monitor and positively impact external risk exposure and mitigation.
## Actions
* **Close Alerts** *(Containment)* - Closes an alert by Alert ID.
* **Get Alert Details** *(Enrichment)* - Retrieves a single alert by Alert ID.
* **Search Alerts** *(Enrichment)* - Returns a list of alerts based on the search criteria.
* **Update Alerts** *(Containment)* - Updates the status of an alert by Alert ID.
## Configure Cyberint in Automation Service and Cloud SOAR
import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md';
import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md';
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';
*
* **Instance Name Url**. Enter the domain name associated with your Cyberint instance (typically in the format `https://{instance_domain}.cyberint.io/`).
* **API key**. Enter the API key associated with your Cyberint account.
* **Company Name**. Enter the company (client) name associated with your Cyberint instance.
*
*
*
*
})
For information about Cyberint, see the [Cyberint website](https://cyberint.com/).
## Test actions
Before you start exploring the features of the Cyberint app, try test runs of each of the actions to learn specifics of usage. For general information about testing actions, see [Test action](/docs/platform-services/automation-service/automation-service-integrations/#test-action).
### Search Alerts
The **Search Alerts** action is designed to search for alerts using criteria (filters) such as **Severity**, **Statuses**, datetime range.
})
The execution result displays a table with most valuable information, but also you can switch to the JSON-output mode by clicking the `{}` button.
})
})
### Get Alert Details
The **Get Alert Details** action is designed to search for alerts by unique **Alert Ref Id**.
})
The execution result displays a table with most valuable information, but also you can switch to the JSON-output mode by clicking the `{}` button.
})
})
### Update Alerts
The **Update Alerts** action is designed to update an alert by **Alert Ref Ids** array.
The alert information available for update is:
- **Status**. Available statuses:
- Open
- Acknowledged
})
The execution result displays a message **Alerts status updated successfully**. This result means successful result of an execution.
})
})
### Close Alerts
The **Close Alerts** action is designed to close an alert by **Alert Ref Ids** array with providing a Closure reason and description if applicable.
The alert information available for closing is:
- **Closure reason**. Available reasons:
- Resolved
- Irrelevant
- False positive
- Irrelevant alert subtype
- No longer a threat
- Asset should not be monitored
- Asset belongs to my organization
- Asm no longer detected
- Asm manually closed
- Other
- **Closure reason description**. Can be set only if the chosen **Closure reason** is **Other**.
})
The execution result displays a message **Alerts is closed successfully**. This result means successful result of an execution.
})
})
## Change Log
* May 16, 2024 - First upload
* June 17, 2024 - Improve documentation
* April 29, 2026 (v1.2) - Upgraded the `python3_generic` Docker image (Python 3.8) to `python3_12_generic` (Python 3.12) to address Python 3.8 end-of-life and improve security and performance.