Skip to main content
GreyNoise for SOAR app icon

GreyNoise for SOAR

This app provides investigative capabilities using the GreyNoise plugin and supports receiving alerts and feeds via webhook from GreyNoiseBuilt by SOAR Community
soar product badge
Default Version 3.0.1

July 21, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4

Rating
5
(2)

Log in to rate this app

Support
Developer Supported
Ranking

#22 in Reputation

This app provides investigative capabilities using the GreyNoise plugin and supports receiving alerts and feeds via webhook from GreyNoise

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using the supplied configuration
  • lookup ip: Lookup IP using GreyNoise API Quick Check Endpoint
  • ip reputation: Get full GreyNoise reputation and context for a specific IP
  • gnql query: Use the GreyNoise Query Language to run a query
  • lookup ips: Lookup IPs using GreyNoise API Multi Quick Check Endpoint (comma-separated, limit 500 per request)
  • on poll: Get details on a specific GNQL query
  • noise ip timeline: GreyNoise IP Timeline lookup for events matching a specific field
  • get cve details: Retrieve details about a specific Common Vulnerabilities and Exposures (CVE)