Phishing analysis
Keepnet + FortiSandbox integration
Detonate suspicious URLs and files in Fortinet’s sandbox.
Lookup
Keepnet integrates with FortiSandbox to detonate suspicious URLs and files in Fortinet’s sandbox.
What you get
- A verdict added to incidents automatically
- Usable as a condition in playbook rules
- Shown next to the other engines’ results
How it works
- An employee reports an email
- Keepnet sends its URLs and files to FortiSandbox
- The verdict joins the incident and can trigger a playbook
Data and permissions
| Data | Direction | Detail |
|---|---|---|
| URLs and files from reported emails | Out | Only what this engine checks |
| Verdict | In | Stored with the incident |
What you need
- Your own FortiSandbox API key
- Incident Responder
Set up
Company settings, Integrations: paste your API key.
Related integrations
- Works with
- Incident Responder
- Built by
- Keepnet
- Last updated
- October 2026
