---
title: "Proofpoint TAP"
slug: "proofpoint-tap"
updated: 2025-03-18T20:31:26Z
published: 2025-03-18T20:31:26Z
canonical: "docs.databee.buzz/proofpoint-tap"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# Proofpoint TAP

Proofpoint Targeted Attack Protection (TAP) helps enterprises stay ahead of attackers with an innovative approach that detects, analyses and blocks advanced threats before they reach your inbox. For detailed information refer to [Proofpoint’s documentation](https://www.proofpoint.com/uk/products/advanced-threat-protection/targeted-attack-protection).

**Integration Method:** API

**Tables**: Email Activity (4009), Detection Finding (2004)

This integration supports the following events.

| **Event** | **Description** |
| --- | --- |
| Events | Fetch events for all clicks and messages relating to known threats. |

This integration supports the following versions.

| Proofpoint TAP API version | v2.0 |
| --- | --- |

> [!NOTE]
> **Note:**
> 
> Proofpoint TAP doesn’t follow a traditional versioning system. Instead, it is a continuously updated cloud service.

## Prerequisites

- The user should have access to the Proofpoint TAP with administrator privileges.
- The user should have access to the DataBee console.

## Configuration Overview

1. Generate service credentials on the Proofpoint TAP dashboard to authenticate to the API.
2. Add the [Proofpoint TAP data feed](/user-manual/docs/proofpoint-tap#databee-configuration) integration in the DataBee console with the required API credentials.

| **DataBee Parameter** | **Proofpoint TAP Parameter** |
| --- | --- |
| Username | Service Principal |
| Password | Secret |

## Proofpoint TAP Configuration

1. Login to the [Proofpoint TAP dashboard](https://threatinsight.proofpoint.com).
2. Navigate to **Settings** > **CONNECTED APPLICATIONS**.

![A screenshot of a computer Description automatically generated](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/proofpoint-tap-mar2025-image-xnez46x7.png?sv=2026-02-06&spr=https&st=2026-10-26T09%3A34%3A17Z&se=2026-10-26T10%3A34%3A17Z&sr=c&sp=r&sig=Oa1m82%2FMJcdD%2B3hIpSvsX%2BI6hp5uaG7QYVuhqKdxg3s%3D)
  1. Click on **Create New Credential**.
3. Enter the Name for credential set.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/proofpoint-tap-mar2025-image-dv0teakd.png?sv=2026-02-06&spr=https&st=2026-10-26T09%3A34%3A17Z&se=2026-10-26T10%3A34%3A17Z&sr=c&sp=r&sig=Oa1m82%2FMJcdD%2B3hIpSvsX%2BI6hp5uaG7QYVuhqKdxg3s%3D)
  1. Click on the **Generate** button. The “Generated Service Credential” window will appear.
4. Copy the **Service Principal** and **Secret** for later use.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/proofpoint-tap-mar2025-image-tmq7yveu.png?sv=2026-02-06&spr=https&st=2026-10-26T09%3A34%3A17Z&se=2026-10-26T10%3A34%3A17Z&sr=c&sp=r&sig=Oa1m82%2FMJcdD%2B3hIpSvsX%2BI6hp5uaG7QYVuhqKdxg3s%3D)

> [!NOTE]
> **Note**:
> 
> Make sure to copy and save credentials as they will not be shown again.
  1. Click on the **Done** button.

## DataBee Configuration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/proofpoint-tap-mar2025-image-9cehtzq5.png?sv=2026-02-06&spr=https&st=2026-10-26T09%3A34%3A17Z&se=2026-10-26T10%3A34%3A17Z&sr=c&sp=r&sig=Oa1m82%2FMJcdD%2B3hIpSvsX%2BI6hp5uaG7QYVuhqKdxg3s%3D)
2. Search for **Proofpoint TAP** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/proofpoint-tap-mar2025-image-s5ceuvl4.png?sv=2026-02-06&spr=https&st=2026-10-26T09%3A34%3A17Z&se=2026-10-26T10%3A34%3A17Z&sr=c&sp=r&sig=Oa1m82%2FMJcdD%2B3hIpSvsX%2BI6hp5uaG7QYVuhqKdxg3s%3D)
3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/proofpoint-tap-mar2025-image-h91tm8eb.png?sv=2026-02-06&spr=https&st=2026-10-26T09%3A34%3A17Z&se=2026-10-26T10%3A34%3A17Z&sr=c&sp=r&sig=Oa1m82%2FMJcdD%2B3hIpSvsX%2BI6hp5uaG7QYVuhqKdxg3s%3D)
4. Enter feed contact information and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/proofpoint-tap-mar2025-image-crv69rgd.png?sv=2026-02-06&spr=https&st=2026-10-26T09%3A34%3A17Z&se=2026-10-26T10%3A34%3A17Z&sr=c&sp=r&sig=Oa1m82%2FMJcdD%2B3hIpSvsX%2BI6hp5uaG7QYVuhqKdxg3s%3D)
5. In the configuration page, confirm the following:

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/proofpoint-tap-mar2025-image-46tbs5dx.png?sv=2026-02-06&spr=https&st=2026-10-26T09%3A34%3A17Z&se=2026-10-26T10%3A34%3A17Z&sr=c&sp=r&sig=Oa1m82%2FMJcdD%2B3hIpSvsX%2BI6hp5uaG7QYVuhqKdxg3s%3D)
  - Authorization Method: Basic
  - API Base URL: this is the base URL that DataBee will interact with.
  - Username: paste the Service Principal.
  - Password: paste the Secret.
  - Event Types: preselected for all the event types that integration pulls.
6. Click **Submit**.

## Troubleshooting Tips

- Ensure the username and password are pasted correctly. Since you cannot view the service principle and secret after the 1st time, re-create the creds, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.