--- title: Herd Security API Integration on Truto slug: herdsecurity category: Security canonical: "https://truto.one/integrations/detail/herdsecurity/" --- # Herd Security API Integration on Truto **Category:** Security **Status:** Generally available ## Unified APIs ### Unified User Directory API - **Users** — The User object represents a User. ## MCP-ready AI tools Truto exposes 4 tools for Herd Security that AI agents can call directly. - **list_all_herd_security_enrollments** — List all training enrollments and completion statuses for your herdsecurity organization. Returns: enrollment_id, user_id, tag_id, training_id, enrollment_date, completion_date, status. - **list_all_herd_security_users** — List users in herdsecurity for your organization. Returns: user_id, first_name, last_name, email, status. - **list_all_herd_security_tags** — List all tags used to categorize trainings in your herdsecurity organization. Returns: tag_id, name, status, start_date, end_date, created_at. - **list_all_herd_security_tag_trainings** — List all trainings associated with a specific tag in herdsecurity. Returns: training_id, title, description. Required: tag_id. ## How it works 1. **Link your customer's Herd Security account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Herd Security.** The Proxy API is a 1-to-1 mapping of the Herd Security API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate SOC 2 & ISO 27001 evidence collection** — GRC platforms can continuously pull training enrollment and completion data from Herd Security to prove workforce compliance in real time, replacing manual CSV uploads and screenshot evidence during audits. - **Enrich human risk scores with training telemetry** — Security posture and human risk management platforms can factor Herd Security enrollment status and training completion into per-employee risk scores, elevating users who ignore critical phishing or deepfake modules. - **Gate sensitive tool provisioning on training completion** — HRIS and onboarding platforms can hold back provisioning of high-risk tools until Herd Security confirms a new hire has completed foundational security training tagged as mandatory onboarding. - **Map compliance frameworks to training curricula** — Compliance dashboards can programmatically discover which Herd Security tags and trainings map to specific frameworks (SOC 2, HIPAA, ISO 27001), giving customers a live view of coverage without hardcoded mappings. - **Reconcile identity directories with security training rosters** — Workforce platforms can match employees from their identity directory against active Herd Security users to surface gaps — employees missing from training, or stale training profiles for offboarded staff. ## What you can build - **Continuous compliance evidence sync** — Poll Herd Security enrollments on a schedule to keep an up-to-date audit log of user_id, completion_date, and status per training module. - **Training curriculum browser** — Let admins browse Herd Security tags and their associated trainings inside your product to select which campaigns map to internal policies or framework controls. - **Employee training coverage dashboard** — Cross-reference Truto's Unified User Directory with Herd Security users and enrollments to show per-employee completion status across every required module. - **Risk-weighted training scorecards** — Aggregate enrollment completion data by tag (e.g., Deepfake-Defense, SOC2-Required) to compute risk scores that flag high-risk employees or teams. - **Onboarding gate for sensitive access** — Trigger downstream provisioning workflows only after a new hire's enrollments tagged as onboarding show a completed status in Herd Security. - **Framework-to-training coverage report** — Generate a live report showing what percentage of active users have completed every training under a given compliance tag, exportable as auditor-ready evidence. ## FAQs ### What data can I pull from Herd Security through Truto? Truto exposes tools to list users, tags, tag-to-training mappings, and enrollments. This gives you the workforce roster, the curriculum catalog, and the completion telemetry needed for compliance and risk workflows. ### How do I match Herd Security users to employees in my product? Use Truto's Unified User Directory API alongside list_all_herd_security_users to reconcile identities. You can match on email or another shared identifier to correlate enrollment records with the employee profiles already in your system. ### Does Truto handle authentication with Herd Security? Yes. Truto manages the auth handshake, credential storage, and token lifecycle so your end users connect their Herd Security account once and your product accesses the API without you writing auth code. ### How fresh is the enrollment and completion data? The integration supports read operations via polling. Most customers run a daily or hourly sync of list_all_herd_security_enrollments to keep completion status current — appropriate for audit evidence and compliance dashboards. ### Can I write data back to Herd Security, like creating enrollments? The current tool set is read-only: listing users, tags, tag-trainings, and enrollments. If your workflow requires write actions such as enrolling users or triggering campaigns, reach out to Truto and we can prioritize adding those endpoints. ### How do I discover which trainings map to a compliance framework? Call list_all_herd_security_tags to find framework-relevant tags (e.g., SOC2-Required), then list_all_herd_security_tag_trainings to enumerate every training module under that tag. You can then join against enrollments to measure coverage.