Skip to main content

Cyware Orchestrate

Google Safe Browsing

App Vendor: Google

Connector Category: Data Enrichment and Threat Intelligence

App Version in Orchestrate: 1.0.1

API Version: 4.0.0

About App

Google Safe Browsing is a Google service which investigates billions of URLs to look for unsafe websites. The Google Safe Browsing app enables security analysts to check the reputation of URLs against Google's constantly updated lists of unsafe web resources.

For example, sites that host malware.

The Google Safe Browsing app is configured with the Orchestrate application to perform the following actions:

Action

Description

Check URL Reputation

This action checks for the reputation of the URL or domain.

Configuration Parameters

The following configuration parameters are required for the Google Safe Browsing app to communicate with the Google Safe Browsing enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

API Key

Enter the API key to authenticate and access the Safe Browsing APIs.

Example:

XXXX08b7-5830-4ba9-7d08-f2eg573465a1

Password

Required

Client ID

Enter the client organization's name.

Example:

"Cyware"

This is used for API usage tracking.

Client Version

Enter the client version to be used.

Example:

"1.0.0"

This is used for API usage tracking.

Action: Check URL Reputation

This action checks for the reputation of the URL or domain and provides data such as threat type, platform type, cache duration, and so on.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

URL List

Enter the URL or domain to check for the reputation.

Example:

"http://malware.testing.google.test/testing/malware/"

List

Required

Example Request

[
    {
        "url_list": [
            "http://malware.testing.google.test/testing/malware/"
        ]
    }
]