Phishing analysis
Keepnet + your own analysis API
Send reported URLs to your own API and use its verdict.
Lookup
Keepnet sends reported URLs to your own analysis API and adds its verdict to the incident.
What you get
- A verdict added to incidents automatically
- Usable as a condition in playbook rules
- Shown next to the other engines’ results
How it works
- An employee reports an email
- Keepnet sends its URLs to Your own analysis API
- The verdict joins the incident and can trigger a playbook
Data and permissions
| Data | Direction | Detail |
|---|---|---|
| URLs from reported emails | Out | Only what this engine checks |
| Verdict | In | Stored with the incident |
What you need
- Your own Your own analysis API API key
- Incident Responder
Set up
Company settings, Integrations: paste your API key.
Related integrations
- Works with
- Incident Responder
- Built by
- Keepnet
- Last updated
- October 2026
