STEP 1
Select Cortex in workflow
Pick Cortex app in the workflow builder [4] - just one click to select the app.
Cortex Integration
Run TheHive Cortex analyzers and responders, and track their jobs. Connect Cortex events to the tools your engineering teams already use. Start with Get Analyzer, then follow with Get Job or Get Job Report to automate the next step.
3-day trialCancel anytimeUp to 10 minutes quick set up
- GDPR
- Data Encryption
- 2FA
- Local Data Region
Supported triggers and actions for Cortex integration
Triggers can detect changes in Cortex and run actions that can create, search or modify data inside Cortex automatically [3] — exactly how you set them.
- Get AnalyzerReturns a single analyzer.
- Get JobReturns a single job.
- Get Job ReportReturns the report for a completed job.
- List AnalyzersRetrieves available analyzers.
- List JobsRetrieves analyzer/responder jobs.
- List RespondersRetrieves available responders.
- Delete AnalyzerRemoves a custom analyzer registration.
- Delete JobDeletes a job record.
- Make an API CallPerforms an arbitrary authorized API call.
- Run AnalyzerSubmits an observable to an analyzer.
- Run ResponderRuns a responder against a TheHive entity.
- Submit JobSubmits a file-type observable to an analyzer.
- Update Analyzer ConfigurationUpdates org-level analyzer configuration.
How to integrate Cortex in automation workflow?
3 simple steps to make your Cortex connected with other apps in automation workflows on WEXTL. Up to 10 minutes integration set up.
STEP 2
Connect Cortex
When prompted, authorize access to Cortex in WEXTL once. Cortex credentials are encrypted and never shared with WEXTL. Authorization will be reused in any future API calls [3].
WEXTL wants to integrate with your Cortex account. Approve?
STEP 3
Build a workflow
Build your workflow with Cortex yourself or with WEXTL® AI Builder. Connect Cortex to any available integrations [5], or use HTTP node to go beyond them.
Cortex
How Cortex connects and integrates with WEXTL
Save and approve your credentials once — WEXTL® stores authorization information encrypted and reuses the authentication whenever Cortex app is called in workflows. That allows your developer tools automations to run without your attention, per defined schedule [7]. Explore documentation [6] for a detailed list of fields that Cortex supports.
The following table illustrates what fields Cortex integration require during authorization flow inside our workflow builder [4].
Connect Cortex
API Key*Text
••••••••
Hosting*Text
••••••••
Demonstration of Cortex connection step inside WEXTL Workflow Builder [4].
| Field | Type | Help |
|---|---|---|
API KeyRequired | password | — |
HostingRequired | select | — |
Connect Cortex to popular apps on WEXTL
Enter a name of the other app you want to sync with Cortex below. Click on selected app to explore integration options with Cortex. If the app you search for is not available in WEXTL yet, you can use HTTP node [10] instead to integrate it directly.
Example automation with Cortex integration
Select Get Analyzer action from Cortex - this will be a starting point in your automation. Whenever event happens in Cortex, workflow will start [7] from Get Analyzer node.
Search for Update Analyzer Configuration, connect it as the next step of integration sequence. You can use filters between Get Analyzer and Update Analyzer Configuration, so only important data pass from Get Analyzer to the next step. WEXTL gives you full control over the process of Cortex automation. All parts of workflow are visible on the canvas [4].
Cortex on WEXTL has 13 modules for creating developer tools automations. Explore Cortex documentation for more.
Cortex
Get Analyzer
AssemblyAI
Performs action
OR
AssemblyAI
Triggers
Cortex
Update Analyzer Configuration
Demonstration of how visual Cortex automation [6] looks in WEXTL.
Frequently asked questions
Common questions about automating Cortex in your workflows.
Cortex has no triggers, but it provides 13 actions including "Get Analyzer", "Get Job", and "Get Job Report". Pair them with triggers from other apps to automate Cortex tasks.
Integration has 13 actions, including "Get Analyzer", "Get Job", and "Get Job Report", and more. Refer to our Cortex Documentation for detailed inputs and outputs.
No. Most automations are built visually on the canvas by picking triggers, actions, and mapping fields. You can add custom JavaScript with Functions when advanced logic is needed — but our customers do that in rare cases [4].
Yes. Connections are authenticated per account, credentials are encrypted at rest, and you can enforce approvals and team-level access controls on any automation.
The Cortex integration on WEXTL runs directly on its vendor public API — every field name, authentication method, and rate limit is controlled by Cortex official API and covered in documentation [3]. WEXTL handles the request signing and pagination for you.
Absolutely. Where Cortex provides native webhooks, you can use instant triggers to eliminate polling delay. For custom webhooks, WEXTL offers Custom Webhook node, so you can start automation whenever Cortex or any other service sends event to webhook URL.
WEXTL is an AI-first visual canvas. The platform allows you to describe automation in plain text — and AI will wire nodes for Cortex inside the workflow builder [4]. You can also use built-in workflow nodes (AI Agent, Human in the Loop, Condition, Aggregate Results) in pair with Cortex modules to craft complex integration flows with branches, filtering, and conditional logic. There are absolutely no limits of what you can build.
References
List of sources used to gather information about the Cortex integration.
- Cortex integration source code, module specs and credentials implementation.
- Internal Cortex integration documentation, structured input and output parameters, scopes, and authentication methods.
- Official Cortex vendor API documentation — used to verify field meanings, authentication flows, and anything our own specs don't fully capture.
- WEXTL® Visual Workflow Builder, anonymized data from our technical support team.
- WEXTL® Apps Library
- WEXTL® Cortex App Documentation
- WEXTL® Workflow Scheduler
- WEXTL® HTTP node documentation