---
title: "Cofense Intelligence"
slug: "cofense-intelligence"
updated: 2025-03-26T17:58:07Z
published: 2025-03-26T17:58:07Z
canonical: "docs.databee.buzz/cofense-intelligence"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# Cofense Intelligence

Cofense Intelligence streamlines the identification and management of phishing threats by providing actionable insights and real-time alerts across your email security landscape. For detailed information, please refer to the [Cofense](https://cofense.com/) website.

**Integration Method:** API

**Tables**: Detection Finding (2004)

The integration supports the following events.

| **Event** | **Description** |
| --- | --- |
| Threats | The API enables users to search for specific threats, returning confirmed Cofense Intelligence or Cofense Credential Phish threats, while also retrieving a list of all vulnerabilities. |

This integration supports the following versions.

| Cofense Intelligence Version Supported | 1.0.7 |
| --- | --- |
| Cofense Intelligence API version | v1 |

## Prerequisites

1. The user should have access to the [Cofense Intelligence portal](https://www.threathq.com/) with an account that has Global Administrator privileges.
2. The user should have access to the DataBee console.

## Configuration Overview

1. [Create an API Token](/user-manual/docs/cofense-intelligence#create-an-api-token) from Cofense Intelligence platform to access the APIs.
2. Create [Cofense Intelligence data feed](/user-manual/docs/cofense-intelligence#databee-configuration) in the DataBee console with the required Client credentials.

| **DataBee Parameter** | **Cofense Intelligence Parameter** |
| --- | --- |
| Username | Username |
| Password | Password |

## Cofense Intelligence Configuration

### Create an API Token

1. Log on to [Cofense Intelligence portal](https://www.threathq.com/login) with an account that has the Administrator privileges.
2. Navigate to the **API Tokens** tab and click on **Create New Token**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cofense-intelligence-mar2025-image-s1y8x4vk.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A07%3A01Z&se=2026-10-30T13%3A07%3A01Z&sr=c&sp=r&sig=TtBHe38Trx0ch%2FZrAXuPKwa7FKgFENs9HV%2B4uJkd%2BeE%3D)
3. The “Create New API Token” dialog box will open. Enter the ‘Token Name’ and click **Create**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cofense-intelligence-mar2025-image-f3z6bkjj.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A07%3A01Z&se=2026-10-30T13%3A07%3A01Z&sr=c&sp=r&sig=TtBHe38Trx0ch%2FZrAXuPKwa7FKgFENs9HV%2B4uJkd%2BeE%3D)
4. Once the API token is created, a dialog box will open displaying the **User Name** and **Password**. Copy these credentials.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cofense-intelligence-mar2025-image-5l86zbsr.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A07%3A01Z&se=2026-10-30T13%3A07%3A01Z&sr=c&sp=r&sig=TtBHe38Trx0ch%2FZrAXuPKwa7FKgFENs9HV%2B4uJkd%2BeE%3D)

> [!NOTE]
> **Note:**
> 
> Please ensure that you **copy** the **username** and **password** as this will be visible only once.

## Databee Configuration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cofense-intelligence-mar2025-image-mz7yp760.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A07%3A01Z&se=2026-10-30T13%3A07%3A01Z&sr=c&sp=r&sig=TtBHe38Trx0ch%2FZrAXuPKwa7FKgFENs9HV%2B4uJkd%2BeE%3D)
2. Search for the **Cofense Intelligence** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cofense-intelligence-mar2025-image-1ezq8bfo.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A07%3A01Z&se=2026-10-30T13%3A07%3A01Z&sr=c&sp=r&sig=TtBHe38Trx0ch%2FZrAXuPKwa7FKgFENs9HV%2B4uJkd%2BeE%3D)
3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cofense-intelligence-mar2025-image-nnvcczfl.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A07%3A01Z&se=2026-10-30T13%3A07%3A01Z&sr=c&sp=r&sig=TtBHe38Trx0ch%2FZrAXuPKwa7FKgFENs9HV%2B4uJkd%2BeE%3D)
4. Enter feed contact information and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cofense-intelligence-mar2025-image-4wsl0hh5.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A07%3A01Z&se=2026-10-30T13%3A07%3A01Z&sr=c&sp=r&sig=TtBHe38Trx0ch%2FZrAXuPKwa7FKgFENs9HV%2B4uJkd%2BeE%3D)
5. In the configuration page, confirm the following:

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/cofense-intelligence-mar2025-image-m4lj9e5g.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A07%3A01Z&se=2026-10-30T13%3A07%3A01Z&sr=c&sp=r&sig=TtBHe38Trx0ch%2FZrAXuPKwa7FKgFENs9HV%2B4uJkd%2BeE%3D)
  - Authorization Method: Basic
  - Username: paste Username generated earlier in the Cofense Intelligence portal.
  - Password: paste Password generated earlier in the Cofense Intelligence portal
  - Event Types: preselected for all the event types that integration pulls.
6. Click **Submit**.

## Troubleshooting Tips

- If you encounter an **Invalid client** or **Unauthorized client** error, it may be due to incorrect credentials. Please double-check that the username and password are entered correctly. To avoid any issues, consider pasting it into a text editor to ensure there are no extra spaces or unexpected characters before reconfiguring the DataBee feed.