# Senteon integration

{% hint style="info" %}
If you’re new to integrations in Rewst, read through our introductory integration documentation [here](https://docs.rewst.help/documentation/integrations).
{% endhint %}

## What does the Senteon integration do?

Our Senteon integration enables the automation of Senteon's endpoint hardening platform. Use the Senteon API within Rewst workflows to monitor endpoint compliance status, manage configuration drift alarms, retrieve tenant and endpoint data, and automate security hardening validation for continuous compliance monitoring and Zero Trust policy enforcement.

### Why use the Senteon integration?

* Automatically pull compliance scores and status for all managed endpoints to populate SIEM dashboards, ensuring you can prove "Clean Health" to auditors without manual exports.
* Trigger immediate incidents in your SOC (Blumira/Huntress) when a security setting is changed on a mission-critical server.
* &#x20;Ingest Senteon’s endpoint inventory into your CMDB or SIEM to identify stale or undocumented devices that haven't checked in.
* Cross-reference EDR alerts like a SentinelOne threat with Senteon hardening data to see if a specific misconfiguration allowed the threat to execute.

## Set up the Senteon integration

### Set up steps in Senteon

1. Log in to your Senteon Command Center
2. Navigate to **Settings > API Keys > Manage API Keys**.
3. Click **Add New API Key**.<br>

   <figure><img src="https://1835401289-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAQQ1EHVcEsGKBPVHmiav%2Fuploads%2FY3U5PIxQkgUEYW7k7kzy%2FScreenshot%202026-02-19%20at%2011.38.30%E2%80%AFAM.png?alt=media&#x26;token=5867ac68-3fd7-48ac-b89c-187756a779eb" alt=""><figcaption></figcaption></figure>
4. Enter `Rewst` into the **Name** field.&#x20;
5. Check the **Never Expire** box to ensure that your API Key will work for the Rewst integration indefinitely.
6. Toggle **Permissions** to enabled for all tenants that you wish to manage in Rewst.
7. Click **Create Key**.
8. Copy your generated **Key ID** and **Key Secret**. Note that the token will only be displayed once, and cannot be retrieved once the dialog is closed. Store these values somewhere secure. You'll need both for the rest of the set up steps in Rewst.<br>

   <figure><img src="https://1835401289-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAQQ1EHVcEsGKBPVHmiav%2Fuploads%2FNMsFMQpGfKmMIkGzKd6C%2FScreenshot%202026-02-19%20at%2011.48.27%E2%80%AFAM.png?alt=media&#x26;token=9cd3f849-ac6e-4568-b3da-4429cb45eaac" alt=""><figcaption></figcaption></figure>

### Set up steps in Rewst

1. Navigate to **Marketplace > Integrations** in the left side menu of your Rewst platform.
2. In the integrations page, search for the `Senteon` integration.\
   \
   ![](https://1835401289-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAQQ1EHVcEsGKBPVHmiav%2Fuploads%2F4hk16IOkKExoKqhcCX76%2FScreenshot%202026-01-29%20at%2011.20.46%E2%80%AFAM.png?alt=media\&token=4dcbdb40-6428-4e9d-8d87-ccb953d085a7)<br>
3. Click on the integration tile to launch the configuration setup page.
4. Paste the **Key ID** and **Key Secret** copied from Senteon into the relevant fields.
5. Click **Save Configuration**.
6. Rewst will do a quick validation of your input. Once completed, you'll see a new section beneath the configuration form for [organization mapping](https://docs.rewst.help/documentation/integrations#what-is-organization-mapping). Complete your mapping as desired.&#x20;

## Test the integration

Saving your configuration during integration setup automatically triggers a test API call to verify that your setup is correct. If something is wrong with your credentials and the integration fails, you'll receive an error message in the Rewst platform.

{% hint style="success" %}
Got an idea for a new integration? Rewst is constantly adding new integrations to our integrations page. Submit your idea or upvote existing ideas here in our [Canny feedback collector](https://rewst.canny.io/integrations).
{% endhint %}

## Senteon integration actions and endpoints

{% hint style="info" %}
For more on how actions work in Rewst, check out our [introductory actions documentation here](https://docs.rewst.help/documentation/workflows/actions-in-rewst).
{% endhint %}

Senteon's complete API documentation can be found [here](https://docs.senteon.co/alarms-apis).

| Category          | Action                              | Description                                                                                                                                                                                                                                              |
| ----------------- | ----------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Account Endpoints | List Account EndPoints              | Inputs parsing as GUIDs are treated as UIDs; others as names. When filtering baselines by name, also filter by tenant since names are tenant-scoped. This API does not write EndpointProfile, BaselineGroup, or ExceptionGroup.                          |
| Account Endpoints | List Account Endpoints by Host Name | Endpoint HostNames are not unique, so this API can return more than one object, up to a maximum of 1000. This request will fail if the caller does not have View permission for any of the endpoints with the specified name.                            |
| Account Endpoints | Get Account Endpoint                | While this API returns a list of endpoints, there will only ever be exactly 1 endpoint in that list.                                                                                                                                                     |
| Agents            | Get Agent Evaluation                | Gets the Evaluation Data retrieved from the agent installed on the endpoint. Requires View permissions for the tenant the given endpoint resides in.                                                                                                     |
| Agents            | Get Agent Compliance                | Gets the Compliance Data retrieved from the agent installed on the endpoint. Requires View permissions for the tenant the given endpoint resides in.                                                                                                     |
| Alarms            | List Alarms                         | Only alarms in tenants that the client has permission to view will be returned. For all parameters that can be specified by a name or UID, the API will assume the argument is a UID if it can be parsed into one, otherwise it will treat it as a name. |
| Endpoint Groups   | List Baseline Groups                | Get all Baseline Groups matching the optional criteria.                                                                                                                                                                                                  |
| Endpoint Groups   | List Baseline Templates             | Gets all Baseline Templates matching the optional criteria.                                                                                                                                                                                              |
| Tenants           | List Tenants                        | Gets a list of all Ids and Names of Tenants within your Organization.                                                                                                                                                                                    |
| Tenants           | Get Tenant By Name                  | Gets detailed information about endpoint status counts for a given tenant.                                                                                                                                                                               |
| Tenants           | Get Tenant                          | Gets detailed information about endpoint status counts for a given tenant.                                                                                                                                                                               |
