Skip to main content
PagerDuty

Overview

The PagerDuty integration surfaces active incidents and on-call schedule data in Pwnbook so security teams can monitor operational incidents alongside vulnerability findings and security events — without switching tools.

Prerequisites

  • A PagerDuty account
  • Admin or Account Owner access in PagerDuty to create API keys
  • Admin or Owner access in Pwnbook

Credentials required

FieldDescription
API KeyA PagerDuty REST API key — either a General Access key or a Read-only key
A read-only key is sufficient for pulling incident and schedule data into Pwnbook.

Setup

1

Create a PagerDuty API key

  1. In PagerDuty, go to Integrations → API Access Keys.
  2. Click Create New API Key.
  3. Give it a description like “Pwnbook”.
  4. Select Read-only API Key (Pwnbook only needs read access).
  5. Copy the generated key.
2

Configure in Pwnbook

  1. Go to Organization Settings → Marketplace → PagerDuty.
  2. Paste your API Key.
  3. Click Save & Test — Pwnbook verifies access by listing your PagerDuty services.

What’s available

FeatureDescription
Active incidentsCount of open and acknowledged incidents, broken out by urgency
Incident listFilterable list of incidents with service, status, and triggered time
On-call schedulesWho is currently on call for each schedule
ServicesHealth summary across your PagerDuty services

Workbench card

The PagerDuty workbench card on your Security Workbench shows:
  • Count of triggered (unacknowledged) and acknowledged incidents
  • Current on-call responder name for your primary schedule
  • A View all link to the full incident list

Incident urgency mapping

PagerDuty incidents have a high or low urgency. Pwnbook displays them as:
PagerDuty urgencyDisplayed as
highCritical
lowLow

Disconnecting

  1. Go to Organization Settings → Marketplace → PagerDuty.
  2. Click Disconnect.
  3. Confirm.