---
title: Proofpoint TAP
description: Gain insights into Proofpoint TAP events
breadcrumbs: Docs > Integrations > Proofpoint TAP
---

# Proofpoint TAP
Integration version1.0.0
{% callout %}
# Important note for users on the following Datadog sites: us2.ddog-gov.com

{% alert level="info" %}
To find out if this integration is available in your organization, see your [Datadog Integrations](https://app.datadoghq.com/integrations) page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email [support@ddog-gov.com](mailto:support@ddog-gov.com).
{% /alert %}

{% /callout %}
   Proofpoint TAP OverviewProofpoint TAP Clicks InsightsProofpoint TAP Messages Insights
## Overview{% #overview %}

[Proofpoint TAP (Targeted Attack Protection)](https://www.proofpoint.com/uk/products/advanced-threat-protection/targeted-attack-protection) is a cybersecurity solution designed to detect, mitigate, and block advanced threats that target people through email. It uses a next-generation email security platform to provide visibility into all email communications.

This integration ingests the following logs:

- **Click Events**: These logs provide information about user interactions with links in emails, including whether clicks were permitted or blocked, along with associated threat identification.
- **Message Events**: These logs provide information about email messages analyzed by Proofpoint TAP, including detection outcomes, delivery status (such as delivered or blocked), and threat identification.

This integration gathers and forwards above mentioned events to Datadog for seamless analysis. Datadog uses its built-in log pipelines to parse and enrich these logs, facilitating easy search and detailed insights. With preconfigured dashboards, the integration offers clear visibility into activities within the Proofpoint TAP platform. Additionally, it includes ready-to-use Cloud SIEM detection rules for enhanced monitoring and security.

## Setup{% #setup %}

### Generate Service Credentials in Proofpoint TAP{% #generate-service-credentials-in-proofpoint-tap %}

1. Login to the **Proofpoint TAP** dashboard.
1. Navigate to **Settings > Connected Applications**.
1. Click **Create New Credential**.
1. Name the **new credential set** and click **Generate**.
1. Copy the **Service Principal** and **Secret**.

### Connect your Proofpoint TAP Account to Datadog{% #connect-your-proofpoint-tap-account-to-datadog %}

1. Add your Service Principal and Secret.
| Parameters                   | Description                                                                                 |
| ---------------------------- | ------------------------------------------------------------------------------------------- |
| Service Principal            | The Service Principal of your Proofpoint TAP account.                                       |
| Secret                       | The Secret of your Proofpoint TAP account.                                                  |
| Get Click Blocked Events     | Control the collection of Click Blocked Events from Proofpoint TAP. Enabled by default.     |
| Get Click Permitted Events   | Control the collection of Click Permitted Events from Proofpoint TAP. Enabled by default.   |
| Get Message Blocked Events   | Control the collection of Message Blocked Events from Proofpoint TAP. Enabled by default.   |
| Get Message Delivered Events | Control the collection of Message Delivered Events from Proofpoint TAP. Enabled by default. |
1. Click the Save button to save your settings.

## Data Collected{% #data-collected %}

### Logs{% #logs %}

The Proofpoint TAP integration collects and forwards click and message events to Datadog.

### Metrics{% #metrics %}

The Proofpoint TAP integration does not include any metrics.

### Events{% #events %}

The Proofpoint TAP integration does not include any events.

## Support{% #support %}

For any further assistance, contact [Datadog support](https://docs.datadoghq.com/help/).