Intruder
Let AI connect your sources for you
Skip the manual setup — run this in your project and the wizard auto-detects your databases and APIs and connects them to PostHog.
Connect Intruder to PostHog to sync your data into the PostHog data warehouse for analysis and modeling.
Enter your Intruder API access token to pull your attack-surface and vulnerability data into the PostHog Data warehouse.
Create an access token under My account > API Access Tokens in your Intruder account. The token is shown only once, so copy it immediately. API scanning of targets requires the appropriate Intruder plan license.
Configuration
| Option | Type | Required |
|---|---|---|
API access token | password | Yes |
Linking Intruder to PostHog
- Go to the Data pipeline page in PostHog
- Click New source and select Intruder
- Fill in the required configuration fields
- Click Next, select the tables you want to sync, and then press Import
Supported tables
| Table | Description | Sync method | Incremental field | Primary key |
|---|---|---|---|---|
targets | A system (host, IP, URL, cloud account, or container image) that Intruder scans for vulnerabilities. | Full refresh | — | — |
scans | A vulnerability scan run against your targets. | Full refresh | — | — |
scan_schedules | A recurring schedule that automatically starts scans against your targets. | Full refresh | — | — |
issues | A distinct type of security weakness Intruder has found, aggregating all of its occurrences across your targets. | Full refresh | — | — |
occurrences | A single instance of an issue found on a specific target. Fanned out per issue and tagged with its parent issue_id. | Full refresh | — | — |
fixed_occurrences | An occurrence of an issue that has since been resolved (remediated). | Full refresh | — | — |
tags | A tag used to group and filter targets. | Full refresh | — | — |