Security
Herd Security
API integration
Ship Security features without building the integration. Full Herd Security API access via Proxy, normalized data through Unified APIs, and 4 MCP-ready tools for AI agents — all extensible to your exact use case.
Talk to usUse Cases
Why integrate with Herd Security
Common scenarios for SaaS companies building Herd Security integrations for their customers.
Automate SOC 2 & ISO 27001 evidence collection
GRC platforms can continuously pull training enrollment and completion data from Herd Security to prove workforce compliance in real time, replacing manual CSV uploads and screenshot evidence during audits.
Enrich human risk scores with training telemetry
Security posture and human risk management platforms can factor Herd Security enrollment status and training completion into per-employee risk scores, elevating users who ignore critical phishing or deepfake modules.
Gate sensitive tool provisioning on training completion
HRIS and onboarding platforms can hold back provisioning of high-risk tools until Herd Security confirms a new hire has completed foundational security training tagged as mandatory onboarding.
Map compliance frameworks to training curricula
Compliance dashboards can programmatically discover which Herd Security tags and trainings map to specific frameworks (SOC 2, HIPAA, ISO 27001), giving customers a live view of coverage without hardcoded mappings.
Reconcile identity directories with security training rosters
Workforce platforms can match employees from their identity directory against active Herd Security users to surface gaps — employees missing from training, or stale training profiles for offboarded staff.
What You Can Build
Ship these features with Truto + Herd Security
Concrete product features your team can ship faster by leveraging Truto’s Herd Security integration instead of building from scratch.
Continuous compliance evidence sync
Poll Herd Security enrollments on a schedule to keep an up-to-date audit log of user_id, completion_date, and status per training module.
Training curriculum browser
Let admins browse Herd Security tags and their associated trainings inside your product to select which campaigns map to internal policies or framework controls.
Employee training coverage dashboard
Cross-reference Truto's Unified User Directory with Herd Security users and enrollments to show per-employee completion status across every required module.
Risk-weighted training scorecards
Aggregate enrollment completion data by tag (e.g., Deepfake-Defense, SOC2-Required) to compute risk scores that flag high-risk employees or teams.
Onboarding gate for sensitive access
Trigger downstream provisioning workflows only after a new hire's enrollments tagged as onboarding show a completed status in Herd Security.
Framework-to-training coverage report
Generate a live report showing what percentage of active users have completed every training under a given compliance tag, exportable as auditor-ready evidence.
SuperAI
Herd Security AI agent tools
Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.
list_all_herd_security_enrollments
List all training enrollments and completion statuses for your herdsecurity organization. Returns: enrollment_id, user_id, tag_id, training_id, enrollment_date, completion_date, status.
list_all_herd_security_users
List users in herdsecurity for your organization. Returns: user_id, first_name, last_name, email, status.
list_all_herd_security_tags
List all tags used to categorize trainings in your herdsecurity organization. Returns: tag_id, name, status, start_date, end_date, created_at.
list_all_herd_security_tag_trainings
List all trainings associated with a specific tag in herdsecurity. Returns: training_id, title, description. Required: tag_id.
Why Truto
Why use Truto’s MCP server for Herd Security
Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 600+ integrations.
Auto-generated, always up to date
Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.
Fine-grained access control
Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.
Multi-tenant by design
Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.
Works with every MCP client
Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.
Built-in auth, rate limits, and error handling
Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.
Expiring and auditable servers
Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.
Unified APIs
Unified APIs for Herd Security
Skip writing code for every integration. Use Truto’s category-specific Unified APIs out of the box or customize the mappings with AI.
Unified User Directory API
Users
The User object represents a User.
How It Works
From zero to integrated
Go live with Herd Security in under an hour. No boilerplate, no maintenance burden.
Link your customer’s Herd Security account
Use Truto’s frontend SDK to connect your customer’s Herd Security account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.
We handle authentication
Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.
Call our API, we call Herd Security
Truto’s Proxy API is a 1-to-1 mapping of the Herd Security API. You call us, we call Herd Security, and pass the response back in the same cycle.
Unified response format
Every response follows a single format across all integrations. We translate Herd Security’s pagination into unified cursor-based pagination. Data is always in the result attribute.
FAQs
Common questions about Herd Security on Truto
Authentication, rate limits, data freshness, and everything else you need to know before you integrate.
What data can I pull from Herd Security through Truto?
Truto exposes tools to list users, tags, tag-to-training mappings, and enrollments. This gives you the workforce roster, the curriculum catalog, and the completion telemetry needed for compliance and risk workflows.
How do I match Herd Security users to employees in my product?
Use Truto's Unified User Directory API alongside list_all_herd_security_users to reconcile identities. You can match on email or another shared identifier to correlate enrollment records with the employee profiles already in your system.
Does Truto handle authentication with Herd Security?
Yes. Truto manages the auth handshake, credential storage, and token lifecycle so your end users connect their Herd Security account once and your product accesses the API without you writing auth code.
How fresh is the enrollment and completion data?
The integration supports read operations via polling. Most customers run a daily or hourly sync of list_all_herd_security_enrollments to keep completion status current — appropriate for audit evidence and compliance dashboards.
Can I write data back to Herd Security, like creating enrollments?
The current tool set is read-only: listing users, tags, tag-trainings, and enrollments. If your workflow requires write actions such as enrolling users or triggering campaigns, reach out to Truto and we can prioritize adding those endpoints.
How do I discover which trainings map to a compliance framework?
Call list_all_herd_security_tags to find framework-relevant tags (e.g., SOC2-Required), then list_all_herd_security_tag_trainings to enumerate every training module under that tag. You can then join against enrollments to measure coverage.
Herd Security
Get Herd Security integrated into your app
Our team understands what it takes to make a Herd Security integration successful. A short, crisp 30 minute call with folks who understand the problem.