---
sourceDocument: Australia Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/integrate-applications

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Workflow Data Fabric

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Secureworks CTP Spoke

# Secureworks CTP Spoke {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Secureworks CTP Spoke

The Secureworks CTP Spoke enables integration between your ServiceNow instance and the Secureworks Counter Threat Platform (CTP).
This integration allows you to manage security events and tickets directly from ServiceNow, enhancing your security operations workflow.
Show full answer Show less  

## Key Features

* **Event Management Actions:** Retrieve details of specific events or recent event lists from Secureworks CTP.
* **Ticket Management Actions:** Assign tickets to Secureworks Security Operations Center (SOC), close tickets, retrieve ticket details, look up tickets, and post worklogs to Secureworks tickets.
* **Connection and Credential Aliases:** Uses aliases to simplify credential and connection management across multiple environments, reducing configuration overhead.

## Requirements and Dependencies

* An active Secureworks portal account is required.
* Integration Hub subscription is necessary to use the spoke.
* Dependent plugins include:
  * ServiceNow IntegrationHub Runtime
  * IntegrationHub Action Template - Data Stream
  * IntegrationHub Action Step - REST
* Some dependent plugins may require additional licensing if used outside this spoke's scope.

## Compatibility and Versioning

* The spoke is built for Secureworks CTP Version 4 and may be compatible with later versions.
* The latest spoke version is 1.0.3.

## Practical Benefits for ServiceNow Customers

By integrating Secureworks CTP with ServiceNow through this spoke, you can automate and streamline the handling of security events and tickets, reducing manual effort and improving incident response times. Credential aliasing simplifies maintenance across environments, and the available spoke actions provide comprehensive control over Secureworks operations from within your existing ServiceNow workflows.  
Integrate ServiceNow instance with Secureworks Counter Threat Platform (CTP). Manage events and tickets in Secureworks Counter Threat Platform from your ServiceNow instance.

## Request apps on the Store {#secureworks-ctp__section_sz5_jv3_z3b}

Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html).{#secureworks-ctp__inline-send-to-store}

## Integration Hub subscription {#secureworks-ctp__section_ssh_1st_fnb}

This spoke requires an Integration Hub subscription. For more information, see [Legal schedules - IntegrationHub overview](https://www.servicenow.com/content/dam/servicenow-assets/public/en-us/doc-type/legal/snc-addendum-integrationhub.pdf).

## Spoke version {#secureworks-ctp__section_zth_jvx_bsb}

Secureworks CTP spoke v1.0.3 is the latest version. For version history of the spoke, see [Secureworks CTP spoke release notes](https://www.servicenow.com/docs/r/store-release-notes/store-integrationhub-rn-secureworks-ctp.html).{#secureworks-ctp__ctp-spk-ver}

## Supported versions {#secureworks-ctp__section_tsh_1st_fnb}

This spoke was built for Secureworks CTP
V4, but may be compatible with later versions.

## Spoke requirements {#secureworks-ctp__section_wsh_1st_fnb}

Secureworks portal account.

## Spoke dependencies {#secureworks-ctp__section_ysh_1st_fnb}

If you're having trouble installing the app, ensure that these dependent plugins are installed:

* ServiceNow IntegrationHub Runtime (com.glide.hub.integration.runtime)
* ServiceNow IntegrationHub Action Template - Data Stream (com.glide.hub.action_type.datastream)
* ServiceNow IntegrationHub Action Step - REST (com.glide.hub.action_step.rest)
{#secureworks-ctp__ul_zsh_1st_fnb}  
Note:  
Some of these plugins are licensable features and require appropriate licenses, if used outside the spoke implementation.

## Spoke actions {#secureworks-ctp__section_eth_1st_fnb}

The Secureworks CTP spoke provides actions to automate Secureworks CTP tasks
when events occurs in your ServiceNow instance. Available actions
include:  
{#secureworks-ctp__table_fth_1st_fnb__entry__3}

| Category | Action | Description |
|-|-|-|
| Event Management | Get Event Details | Retrieves the details of a specific event. |
| Event Management | Get Recent Events | Retrieves details of a list of recent events. |
| Ticket Management | Assign Ticket To Secureworks SOC | Assigns a ticket to the Secureworks Security Operations Centers (SOC) Team. |
| Ticket Management | Close Secureworks Ticket | Closes the specified Secureworks ticket. |
| Ticket Management | Get Ticket Details | Retrieves the details of the specified Secureworks ticket. |
| Ticket Management | Look up Tickets | Retrieves a list of tickets from Secureworks. |
| Ticket Management | Post Worklog to Secureworks Ticket | Adds a worklog to the Secureworks ticket. |
[ ]

{#secureworks-ctp__table_fth_1st_fnb}

## Connection and credential alias requirements {#secureworks-ctp__section_lth_1st_fnb}

Integration Hub uses aliases to manage connection
and credential information. Using an alias eliminates the need to configure multiple
credentials and connection information profiles when using multiple environments. If the
connection or credential information changes, you don't need to update any actions that
use the connection. For more information, see [Connections and Credentials](https://www.servicenow.com/docs/access?context=r-credentials&version=australia&pubname=australia-platform-security&ft:locale=en-US).

For information about setting up the spoke, see
[Set up the Secureworks CTP spoke](https://www.servicenow.com/docs/Qq8WTVjCE9uXovXrNOF32A#setup-secureworks-ctp "Integrate the ServiceNow instance and Secureworks CTP by registering a custom application in Secureworks Portal to authenticate ServiceNow requests.").