Grip Security

Grip Security is a SaaS Security Control Plane that provides continuous discovery, identity risk management, and access governance for SaaS and AI services.

Use Cases the Adapter Solves

• Discover Shadow SaaS and AI Applications: Gain complete visibility into all SaaS and AI applications being used across your organization, including those outside of SSO, to identify unauthorized or unmanaged services that pose security risks.
• Monitor Identity Risk and Access Governance: Track user access patterns, SaaS application usage, and permission levels to identify over-privileged accounts, inactive users, and potential security exposures across your SaaS ecosystem.

Asset Types Fetched

• Users
• SaaS Applications

Data Retrieved through the Adapter

For example:

Users

• Email Address, Full Name, Display Name
• Organizational Unit, Manager Email, Number of SaaS Applications

SaaS Applications

• Application Name, URL, Risk Score

Before You Begin

Required Ports

• TCP port 443 (HTTPS)

Authentication Methods

API Key Authentication

The adapter authenticates using an API key passed in the access-token header for all API requests to the Grip Security platform.

APIs

Axonius uses the Grip Security API. The following endpoints are called:

• GET /public/users - Retrieves user information including identity data, SaaS usage, and access governance details
• GET /public/saas - Retrieves SaaS application information including risk scores, user counts, and security posture data

Required Permissions

The following permissions are required:

The API key must have read access to the Grip Security API with permissions to query user and SaaS application data.

Note: The exact permission names should be confirmed with your Grip Security administrator or Grip Security support, as the API documentation is not publicly available.

Supported From Version

Supported from Axonius version 8.0

Connecting the Adapter in Axonius

Navigate to the Adapters page, search for Grip Security, and click on the adapter tile.

Click Add Connection.

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

1. Host Name or IP Address - Base domain for the API, should contain a prefix of http:// or https://. Do not add any specific endpoints after the domain. Example: https://{client-tenant}.dep.grip.security/public
2. API Key - The API key generated from your Grip Security portal with read access to user and SaaS application data.

Optional Parameters

1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
3. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
4. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.