Kaspersky Endpoint

Connect Kaspersky Endpoint to collect endpoint detection & response evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Kaspersky Endpoint:

   1. In Kaspersky Security Center Web Console, go to Users & roles › Users & groups and select the Users tab.
   2. Click Add.
   3. In the Add user window, enter a Name for the Safeguard account and a password for the user connection to Kaspersky Security Center (8 to 256 characters, from at least three of: uppercase, lowercase, digits, special characters).
   4. Save the changes to create the account.
   5. Assign the Auditor role to the new user; the account cannot sign in until it has a role.
   6. In the Administration Console: in the console tree, select the Administration Server node, open its context menu and select Properties.
   7. Select the Security section, then select the Safeguard user in Names of groups or users (click Add if it is not listed).
   8. Select the Roles tab and click Add. In the User roles window, select Auditor, then click OK.

   Where to find the other values:

   • Server URL: The https address of your Kaspersky Security Center Administration Server, reachable from the internet.
   • Username: The Name you entered in the Add user window.

   User creation steps are from the Kaspersky Security Center Linux 16 Web Console help; role assignment steps are from the KSC 14.2 Administration Console (MMC) help, so Web Console users may see a different path. Kaspersky describes Auditor as permitting all viewing operations and also executing created tasks on device selections, so it is not strictly read-only; Kaspersky recommends assigning it carefully. one_time_display is false because the customer sets the password.

   Source: support.kaspersky.com, support.kaspersky.com, support.kaspersky.com, checked 2026-10-07.

   The permissions Safeguard needs: Auditor.

2. On Compliance › Connectors, open Kaspersky Endpoint, click Connect, choose API token and fill in:

   Field	What to enter
   Server URL	Required. Your own server: an https address reachable from the internet.
   Username	Required.
   Password	Required. Stored encrypted and never shown again.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Kaspersky Endpoint and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Endpoint Detection & Response connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks