Secureworks CTP Ticket Ingestion Integration

---
title: Secureworks CTP Ticket Ingestion Integration
description: The Secureworks Counter Threat Platform ticket ingestion integration enables you to automatically fetch Secureworks CTP tickets, convert them into security incidents and perform automated response actions.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/secureworks-ctp-about.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Secureworks CTP Ticket Ingestion Integration

The Secureworks Counter Threat Platform ticket ingestion integration enables you to automatically fetch Secureworks CTP tickets, convert them into security incidents and perform automated response actions.

The key features of this integration include:

-   Automatic ingestion of selected tickets \(including attachments\) based on a pre-defined schedule.
-   Mapping of ticket and event fields to Security Incident Response fields.
-   Preview of security incidents mapped to the ticket fields.
-   Filtering and aggregation of tickets.
-   On demand retrieval of events associated with a ticket.
-   Periodic tracking of key updates to tickets.
-   Automating ticket updates and closures based on SIR incident status
-   Master ticket update.
-   Synchronization of Secureworks worklogs with Security Incident Response worknotes.