Safeguard Docs
Compliance ConnectorsSetup by categorySecurity Training

Hoxhunt

Connect Hoxhunt to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.

Record your Hoxhunt connection as security training evidence. Automated collection is not available for this provider yet.

CategorySecurity Training
Connect withAPI token
What a connection producesConnection record

Connect with an API token

  1. In Hoxhunt:

    1. Sign in as a Hoxhunt user with the Admin or Role Management Admin role. Hoxhunt suggests a dedicated user for the integration (for example hoxhunt.api@yourcompany.com) made admin, because the token stops working if its admin user is removed.
    2. Go to https://admin.hoxhunt.com/account-settings/access-tokens (or, in the admin app at admin.hoxhunt.com, click Account in the left-side navigation menu).
    3. Click Create a new token, enter the token description, and confirm by clicking Create a new token.
    4. Copy the token before closing the page; you cannot retrieve it later.

    Where to find the other values:

    • Base URL (optional): Leave blank for Hoxhunt's GraphQL API; its documentation is at https://app.hoxhunt.com/docs/graphql-external.
    • Account / Org / Workspace (optional): Not needed: the token is tied to an admin user in your Hoxhunt organization.

    Hoxhunt shows the secret only once, so copy it before you leave the page.

    The GraphQL API covers quests (simulations), threats and incidents. Hoxhunt documents no read-only token type; the token carries its admin user's access. If you forget to copy it, delete the token and create a new one. Verification: the article URL returned HTTP 403 to an anonymous fetch; the same article was read through Hoxhunt's Help Center API (support.hoxhunt.com/api/v2/help_center/en-us/articles/4408156433298.json) and supports every step.

    Source: support.hoxhunt.com, checked 2026-10-07.

  2. On Compliance › Connectors, open Hoxhunt, click Connect, choose API token and fill in:

    FieldWhat to enter
    API token / Personal access tokenRequired. Stored encrypted and never shown again.
    Base URL (optional)—
    Account / Org / Workspace (optional)—
  3. Click Connect with token.

Frameworks

No automated compliance test reads Hoxhunt yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

On this page