Tech Partner integrations can be certified by Recorded Future if the following criteria are met:
- Integrations are enabled with appropriate API authorization
- Typically, this means that clients seeking to use a partner integration to Recorded Future must have a valid, client-specific Recorded Future API Token.
- For intelligence card extension partners, the situation is reversed; the extension integration is enabled in Recorded Future when the client has valid credentials for accessing the partner API (typically an API key or username/password).
- Integrations make appropriate use of the Recorded Future API and includes the "X-RF-User-Agent" header
- This applies to integrations that call upon the Recorded Future Connect API; this does not apply to intelligence card extension partners
- the "X-RF-User-Agent" header should include the name of the integration partner and a relevant version number of the integration. For Partner integrations that may have several different modules that use the Recorded Future API, we request that the module name be included in the header. See this support page for more detail.
- Recorded Future also requests a copy of all integration code (fragments) where API calls to Recorded Future are made; the intent is to review calls made and ensure the API is being used appropriately. In some cases Recorded Future may suggest more efficient ways for the API to be used.
- Information from Recorded Future should be displayed in the partner application in an appropriate manner
- Usually via a live demo, the partner will show Recorded Future staff the integration and answer questions about how the partner's clients are expected to interact with the integrated data.
- Intelligence Card Extensions must be submitted for automated and manual validation
- Recorded Future will conduct an automatic validation of the intelligence card extension package, which must be provided as a .tgz package. If the automated validation passes, the integration will be loaded into Recorded Future's staging environment with feedback and screenshots shared back with the partner. In all cases, feedback will be provided promptly to the integration partner.
- See this support page for further details on testing and validating Intelligence Card Extensions.
.