# Vectra AI

The Dropzone AI Platform integrates with [Vectra AI](https://www.vectra.ai/platform), an AI-driven NDR platform for automated threat detection and response across hybrid networks, including public clouds, SaaS, identity systems, and data centers. Dropzone supports both Cloud and On-premise deployments of Vectra AI.

## Create an API Client (Cloud Deployment)

If you have a Cloud deployment, Vectra AI requires an API Client and Secret Key to enable.

To obtain these, do the following:

* Log in to your Vectra AI console
* In the left sidebar, navigate to Manage > API Clients
* Click "Add API Client"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-e3018b7760d0f74fc2485d68d3f37a5c7a613d0d%2Fvectra-ai-1.png?alt=media" alt=""><figcaption><p>Add API Client</p></figcaption></figure>

* Name the client something memorable, such as "Dropzone AI"
* Assign the client the Read-Only role
* Click "Generate Credentials"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-c2c037733fa19118b14b5273b49ab1556c15eaaf%2Fvectra-ai-2.png?alt=media" alt=""><figcaption><p>Generate the API Client</p></figcaption></figure>

* Copy the Client ID and Secret Key generated for use later in the Dropzone UI, where they are called "OAuth2 Client ID" and "OAuth2 Client Secret," respectively

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-980e823f5257b1af37368e528b846469d0be8e1b%2Fvectra-ai-3.png?alt=media" alt=""><figcaption><p>Save the credentials</p></figcaption></figure>

## Create an API Token (On-Premise Deployment)

* Log in to your Vectra AI console
* In the left sidebar, navigate to My Profile

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-4ab84f2f9fe2acb44fbea5a9f8861b00e0eebc5e%2Fvectra-ai-4.png?alt=media" alt=""><figcaption><p>Click "My Profile"</p></figcaption></figure>

* Click "View API Token"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-972fa60a2ccc22af88d970304f3f09ccf1ef7a70%2Fvectra-ai-5.png?alt=media" alt=""><figcaption></figcaption></figure>

* Input your password, then click "Continue"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-2124daf8328c34db3adecd03d6bf5da915b8cfb1%2Fvectra-ai-6.png?alt=media" alt=""><figcaption><p>Input your credentials</p></figcaption></figure>

* Copy the API token shown for use later in the Dropzone UI, where it is called "API Token"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-243aefb498a6321dfd21bc9cd992e0be8674ab66%2Fvectra-ai-7.png?alt=media" alt=""><figcaption><p>Copy the API Token</p></figcaption></figure>

* Click "Close"

## Enable Vectra AI

To enable the Alert Source integration, you'll need the following information:

| Dropzone Field       | Source                                                                                    |
| -------------------- | ----------------------------------------------------------------------------------------- |
| Deployment Type      | Your Vectra AI deployment type, e.g. Cloud or On-premise                                  |
| Vectra AI URL        | The base URL of your Vectra instance, e.g. <https://api.vectra.ai> or <https://10.20.1.5> |
| OAuth2 Client ID     | The Client ID value you copied earlier. Only necessary for Cloud deployments              |
| OAuth2 Client Secret | The Secret Key value you copied earlier. Only necessary for Cloud deployments             |
| Vectra AI Server     | The server hostname of your on-premise deployment, e.g. 10.20.1.5                         |
| Vectra AI Port       | The API port of your on-premise deployment                                                |

To enable the Alert Source integration, do the following:

* Navigate to your Dropzone AI tenant home page e.g. https\://*mycompany*.dropzone.app
* In the bottom left hand corner, navigate to Settings > Integrations

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-b3f07f902b1402dadc7abbd8bb62f9c204547390%2Fui-integrations-dropdown.png?alt=media" alt=""><figcaption><p>Integrations Dropdown</p></figcaption></figure>

* Click "Available"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-434641ec6d4e45051842f86164f485d6bd289424%2Fapp_system_integrations_available.png?alt=media" alt=""><figcaption><p>Click Available</p></figcaption></figure>

* In the Search bar, search Vectra AI then click "Configure"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-9ba395033aafd4ad23b8ed5099c6ac2c6c84dd5e%2Fapp_system_integrations_available_vectra-ai.png?alt=media" alt=""><figcaption><p>The Vectra AI Tile</p></figcaption></figure>

* Under the Alert Source header, if your Vectra AI integration is behind an [On-premise Dropzone Connector](https://docs.dropzone.ai/platform/settings/connector), select your connector from the dropdown
* Input your Deployment Type and Vectra AI URL

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-a6436ca91632fd2195cb00d62e1c5fbc4c7252b5%2Fapp_system_integrations_available_vectra-ai_alert_config_1.png?alt=media" alt=""><figcaption><p>The Vectra AI alert source configuration (pt 1)</p></figcaption></figure>

* If you have a Cloud deployment, input the OAuth2 Client ID and Secret

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-19d01a8b87526a202f0e43c28a281a85241e31ba%2Fapp_system_integrations_available_vectra-ai_alert_config_3.png?alt=media" alt=""><figcaption><p>The Vectra AI alert source configuration (pt 2)</p></figcaption></figure>

* If you have an On-premise deployment, input the Vectra AI Server, Port, and API Token

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-aaa55796007dd30e2671d659c60b295f03cdb198%2Fapp_system_integrations_available_vectra-ai_alert_config_2.png?alt=media" alt=""><figcaption><p>The Vectra AI alert source configuration (pt 3)</p></figcaption></figure>

* Input your desired poll interval and lookback

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-b2b972b0549130889b5d8040f8f5b2ac0fe4d0b5%2Fapp_system_integrations_available_vectra-ai_alert_config_4.png?alt=media" alt=""><figcaption><p>The Vectra AI alert source configuration (pt 4)</p></figcaption></figure>

* Click "Test & Save" to finish

If you have any errors or questions, engage your Dropzone AI support representative.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.dropzone.ai/integrations/alert/vectra-ai_alert.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
