WatchTowr

Overview

Integrate your Risk Register with WatchTowr. This integration automatically syncs attack surface findings. Only confirmed findings from hunts that apply to your attack surface are imported.

• Source: Attack Surface Monitoring
• Type: Configuration
• Opened By: “WatchTowr Integration”

Setup

The integration can be enabled directly from your Adversarial tenant via Settings > Integrations. The necessary details to connect your WatchTowr environment are the tenant URL and API Token.

Status Mapping

WatchTowr Status	Adversarial Status	Notes
Confirmed	New	Discovered Date from Date Identified; IRU from Severity
Unconfirmed	New	Discovered Date from Date Identified; IRU from Severity
Remediated	Closed
Closed	Closed
Risk Accepted	Closed
Asset no longer tracked	Closed

Severity Mapping

WatchTowr severity maps to Adversarial Initially Reported Urgency (IRU). Only Critical, High, and Medium severity findings are imported — Low and Info findings are excluded.

WatchTowr Severity	Adversarial IRU
Critical	Critical
High	High
Medium	Medium

Fields

WatchTowr Field	Adversarial Field	Notes
title	Title
description	Description	Built from finding details; updated if changed in WatchTowr
created_at	Discovered Date
last_status_updated_at	Closed Date	Only populated for Closed status
severity	IRU	Via severity mapping above
(static)	Source	Always “Attack Surface Monitoring”
(static)	Type	Always “Configuration”