Overview
CyberHoot is a security awareness training and phishing simulation platform for MSPs. By integrating CyberHoot with MSPortal.ai, you can:- View security awareness and compliance metrics for every client in one place
- Track HootScore and per-user training compliance
- Monitor HootPhish challenges and per-participant results
- Include security awareness metrics in client reports
Prerequisites
- An active CyberHoot partner account
- Your CyberHoot API URL and API key
- MSPortal.ai account with integration management permissions
Part 1: Get Your CyberHoot API Credentials
Before connecting to MSPortal.ai, you need your API URL and API key from CyberHoot.Log into CyberHoot
Locate Your API Key
Note Your API URL
/api, for example:Part 2: Connect CyberHoot in MSPortal
The CyberHoot connection page lists its tasks in the Setup guide: Connect, Import or match companies and Review. See Connect and manage integrations for the tasks every connection shares.Connect
Open the connection page
Enter Credentials
Test the connection
- Verify the API URL uses HTTPS and ends with
/api - Verify the API key was copied without extra spaces
- Ensure the key has not been regenerated since you copied it
Save and continue
Import or match companies
This task opens Import or match CyberHoot customers. Match each CyberHoot customer to an MSPortal company. This determines which data syncs to which company. Only data from matched customers is synced to MSPortal.Wait for customer discovery
Review suggestions
Match the rest
Import missing companies
Review and finish setup
Open Review and select Finish setup once the required tasks are complete. Finishing does not wait for customer discovery, user data or challenge results. Check the actual data after background synchronization finishes.Check your data
Open Security Awareness or Reports to review customer scores, compliance and available HootPhish results. Metrics that your CyberHoot plan does not provide display as Not provided. That means no value is available. It is not a zero, a perfect score, or proof that there was no phishing activity.What Gets Synced
CyberHoot integration syncs the following data types to MSPortal for matched customers:Customers
Your CyberHoot customer inventory, including customer name and domain, used for matching and for customer-level metrics such as active user counts and HootScore.Users
Per-user records for each matched customer, including training compliance and user ranking data.Compliance Snapshots
Daily snapshots of customer-level compliance metrics, including HootScore and active user counts, so you can track security awareness trends over time.HootPhish Challenges
Phishing challenge records for each matched customer, including per-participant results linked to synced users where an email match exists.Synchronization Schedule
After initial setup, data syncs automatically:- Connecting or updating credentials triggers a customer discovery sync
- Saving customer matches triggers a detailed sync of the newly matched customers
Managing Your Integration
Open the CyberHoot connection from Settings > Integrations to manage it:Updating Your API Key
Open Connect
Enter New Credentials
Test and Save
Review Matches
Troubleshooting
Frequently asked questions
Can every tenant configure CyberHoot?
Can every tenant configure CyberHoot?
Does testing CyberHoot save the API key?
Does testing CyberHoot save the API key?
Do CyberHoot suggestions guarantee the right company?
Do CyberHoot suggestions guarantee the right company?
Does Not provided mean a CyberHoot customer has no phishing issues?
Does Not provided mean a CyberHoot customer has no phishing issues?
Does Finish setup finish the CyberHoot import?
Does Finish setup finish the CyberHoot import?
Can Company users manage CyberHoot matches?
Can Company users manage CyberHoot matches?
Security & Privacy
- API Key Storage: Your CyberHoot API key is encrypted using Supabase Vault and never exposed in logs or responses
- Data Isolation: All synced data is tenant-isolated and only visible to your organization
- Read-Only Access: MSPortal only reads CyberHoot data; it never modifies your CyberHoot configuration