> ## Documentation Index
> Fetch the complete documentation index at: https://pentest-tools.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Sprinto integration

> Sync security findings to Sprinto for continuous control testing and audit readiness.

The Sprinto integration lets Sprinto automatically pull your findings into its vulnerability management, so they feed your compliance controls and stay audit-ready.

<Info>
  Available on NetSec, WebNetSec, and Pentest Suite plans.
</Info>

## What is Sprinto?

Sprinto is a security and compliance automation platform that helps organizations achieve and maintain certifications such as SOC 2, ISO 27001, HIPAA, and GDPR by automating evidence collection and continuous control monitoring.

## Benefits

<CardGroup cols={2}>
  <Card title="Automated evidence" icon="file-check">
    Findings automatically provide compliance evidence.
  </Card>

  <Card title="Continuous monitoring" icon="radar">
    Keep your compliance posture up to date.
  </Card>

  <Card title="Centralized view" icon="eye">
    See security findings alongside your other compliance data in Sprinto.
  </Card>

  <Card title="Audit ready" icon="clipboard-check">
    Findings ready for auditor review.
  </Card>
</CardGroup>

## How the integration works

This integration is built and maintained by Sprinto. Unlike push-based integrations, Sprinto **pulls** your findings from Pentest-Tools.com using an API key that you generate in your account:

1. You generate a Pentest-Tools.com API key and paste it into Sprinto as a new monitoring source.
2. In Sprinto, you choose which workspaces to sync by entering their names.
3. Sprinto pulls the findings from those workspaces once a day and maps them to your compliance controls.

Because the sync is driven by Sprinto, all configuration of *what* is synced and *when* happens on the Sprinto side, using the API key you provide.

## Prerequisites

* A Pentest-Tools.com account on a paid plan.
* Access to your organization's Sprinto account with permission to add a monitoring source.
* The names of the Pentest-Tools.com workspaces you want to sync.

## Set up in Pentest-Tools.com

First, generate the API key that Sprinto will use to read your findings.

<Steps>
  <Step title="Open the Sprinto integration">
    Go to **Settings > Integrations**, find the **Sprinto** card, and click **Configure**.
  </Step>

  <Step title="Generate an API key">
    Enter a profile name (for example, `sprinto-sync`) and choose an expiration.

    <Tip>
      Sprinto syncs every day, so if the key expires the sync stops until you generate a new one. Consider setting a longer expiration period to avoid the sync stopping unexpectedly.
    </Tip>
  </Step>

  <Step title="Copy the API key">
    Copy the personal access token and store it somewhere safe. For security reasons, **you won't be able to see it again** after you close the dialog.
  </Step>
</Steps>

## Add the monitoring source in Sprinto

Next, add Pentest-Tools.com as a monitoring source in your Sprinto account.

<Steps>
  <Step title="Open the vulnerabilities section in Sprinto">
    Log in to Sprinto and go to the [vulnerabilities overview](https://app.sprinto.com/app/admin/vulnerabilities/overview).
  </Step>

  <Step title="Add a new monitoring source">
    Click on **Add monitoring source** button and scroll to **Pentest-Tools.com Ingestion Plan template**.

    <Frame>
      ![Sprinto Add Monitoring Source](https://content.pentest-tools.com/assets/documentation/sprinto-add-monitoring-source.png)
    </Frame>
  </Step>

  <Step title="Use this template">
    Click on **Use This Template** button. In the following step we will add the API token.

    <Frame>
      ![Sprinto Use this template](https://content.pentest-tools.com/assets/documentation/sprinto-use-this-template.png)
    </Frame>
  </Step>

  <Step title="Configure the Ingestion plan">
    Open the newly created Ingestion plan and click on **Edit plan**.

    Here, you can add your API token by clicking on **Attach Credential** button, then **Connect**, enter your API token and finally click on **Connect to Pentest-Tools.com API token**.

    <Frame>
      ![Sprinto Paste Api Key](https://content.pentest-tools.com/assets/documentation/sprinto-connect-credentials.png)
    </Frame>

    <Frame>
      ![Sprinto Paste Api Key](https://content.pentest-tools.com/assets/documentation/sprinto-paste-api-key.png)
    </Frame>
  </Step>

  <Step title="Choose the workspaces to sync">
    Enter the names of the workspaces you want to sync, separated by commas. Only findings from these workspaces are pulled into Sprinto, so make sure the names match your Pentest-Tools.com workspaces exactly.

    <Frame>
      ![Sprinto Select Workspaces](https://content.pentest-tools.com/assets/documentation/sprinto-add-workspaces.png)
    </Frame>
  </Step>

  <Step title="Save plan">
    Save the configuration. Sprinto will start pulling findings on its next daily sync, or you can test it right away using the **Run** button.
  </Step>
</Steps>

## What gets synced

All findings from the selected workspaces, except Informational ones.

The sync runs **daily**. The exact time can vary, so a new finding can take up to a day to appear in Sprinto after a scan completes. You can manually trigger the data refresh anytime from your Sprinto account.

## Managing the API key

The connection relies entirely on the API key you generated:

* To rotate the key, generate a new API key in **Settings > Integrations > Sprinto** and update the monitoring source in Sprinto with the new value.
* To stop the sync, remove the monitoring source in Sprinto, then revoke the API key in Pentest-Tools.com so it can no longer be used.

<Warning>
  If the API key expires or is revoked, Sprinto can no longer pull your findings and the sync stops. Generate a new key and update the monitoring source in Sprinto to resume.
</Warning>

## Troubleshooting

<AccordionGroup>
  <Accordion title="Findings not appearing in Sprinto">
    * Confirm the workspace names in Sprinto match your Pentest-Tools.com workspaces exactly (watch for typos or extra spaces).
    * Remember that **Informational** findings are never synced.
    * The sync runs once a day, so allow up to a day for new findings to appear.
  </Accordion>

  <Accordion title="Sync stopped working">
    * Check whether the API key has expired or been revoked in **Settings > Integrations > Sprinto**.
    * Generate a new API key and update the monitoring source in Sprinto.
  </Accordion>

  <Accordion title="Only some workspaces are syncing">
    * Make sure every workspace you want to sync is listed in the comma-separated workspace names in Sprinto.
  </Accordion>
</AccordionGroup>

## Related topics

* [Vanta integration](/docs/capabilities/integrations/vanta)
* [Findings](/docs/core/findings/findings)
* [Workspaces](/docs/core/workspaces)