Nightfall DLP

Nightfall is a DLP (Data Loss Prevention) platform that discovers, monitors, and protects sensitive data across SaaS applications and endpoints via agent-based device coverage.

Use Cases the Adapter Solves

  • Data Loss Prevention Coverage - Identify devices with Nightfall agents installed to ensure comprehensive DLP protection across your endpoint fleet.
  • Agent Health Monitoring - Track agent connection status, missing permissions, and errors to maintain effective data protection across all monitored endpoints.
  • Browser Extension Compliance - Verify browser extension installation and connectivity status to ensure complete data monitoring across web applications.

Asset Types Fetched

  • Devices

Data Retrieved through the Adapter

Devices

  • Hostname, Nightfall Device ID, Operating System
  • Connection Status, Last Seen, User Email

Before You Begin

Required Ports

  • TCP port 443 (HTTPS)

Authentication Methods

API Key Authentication

The adapter authenticates to the Nightfall API using a Bearer token (API Key) in the Authorization header. The API key must be generated from the Nightfall platform with appropriate permissions to access endpoint device information.

APIs

Axonius uses the Nightfall API v1. The following endpoint is called:

  • GET /apps/v1/endpoint/devices - Retrieves endpoint device information including agent status, operating system, network interfaces, and browser extension details

Required Permissions

The API key used for the adapter must have permissions to access endpoint device data through the Nightfall API.

📘

Note

The exact permission names should be confirmed with your Nightfall administrator or Nightfall support, as detailed API documentation for permission requirements is not publicly available. The API key should have read access to endpoint device information.

Supported From Version

Supported from Axonius version 8.0

Connecting the Adapter in Axonius

Navigate to the Adapters page, search for Nightfall DLP, and click on the adapter tile.

Click Add Connection.

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

  1. Domain - Nightfall API base URL. Example: https://api.nightfall.ai
  2. API Key - The API key generated from your Nightfall DLP platform with permissions to access endpoint device information.
  3. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
NightfallDLPAdapter

Optional Parameters

  1. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
  2. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Domain via the value supplied in HTTPS Proxy.
  3. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.