Connect Willo to Elastic Security

Both apps 30Willo 20Elastic Security 10

• Trigger
  List Users

  Triggers when a new user is added to your Willo account.

• Action
  Accept Candidate

  Marks a participant in a Willo interview as Accepted and returns the updated participant. Can also update the participant's name, phone number and custom ID in the same step.

• Action
  Add department

  Creates a new department in your Willo organisation and returns the department, including its key and branding.

• Action
  Add interview from template

  Creates a new interview in Willo from one of your interview templates and returns the new interview.

• Action
  Create Company

  Creates a new company as a child organisation under your Willo organisation, with the owner you name.

• Action
  Create Interview

  Creates a new video interview in Willo with its questions, department, message templates and settings.

• Action
  Delete interview

  Deletes an interview from your Willo account.

• Action
  Delete participant

  Deletes a participant from Willo. Returns whether the deletion was confirmed.

• Action
  Get interview

  Returns a Willo interview by its key, including its questions, owner, department, reviewers, message templates and settings. An error occurs if the interview is not found.

• Action
  Get participant

  Returns a Willo participant (candidate) with their contact details, status, interview, department, scores and answers.

• Action
  Get user

  Returns a Willo user's details, including email, full name, phone, role and status.

• Action
  Invite Someone

  Invites a person to a Willo interview as a participant and returns the new participant with their invite link.

• Action
  List departments

  Returns the departments in your Willo organisation, optionally filtered by name, owner email or owner.

• Action
  List interviews

  Returns the interviews in your Willo account, optionally narrowed by department, owner or a search term, and sorted the way you choose.

• Action
  List message templates

  Returns the message templates (email and SMS) in your Willo account, optionally filtered by title, type or trigger.

• Action
  List participants

  Returns the participants in your Willo account, optionally narrowed to an interview, department or owner, or by a text search.

• Action
  List users

  Returns the users in your Willo account with their key, email and full name.

• Action
  Reject Candidate

  Rejects a candidate by setting the participant's status to Rejected, optionally updating their name, phone or custom ID.

• Action
  Update interview

  Updates an existing interview's details, questions, reviewers, message templates and settings, changing only the values you provide. Returns the updated interview.

• Action
  Update participant

  Updates a participant's name, phone, status (Accepted or Rejected) or your own reference ID.

• Action
  Add case comment

  Adds a user comment, or attaches an alert, to an existing Elastic Security case and returns the updated case.

• Action
  Add detection rule

  Creates a detection rule in Elastic Security (custom query, EQL, ES|QL, threshold, indicator match, new terms, saved query or machine learning).

• Action
  Add exception list item

  Creates an exception item in an existing Elastic Security exception list, so matching events stop producing detection alerts.

• Action
  Delete detection rule

  Deletes a detection rule, identified by its internal id or its stable rule ID, and returns the deleted rule.

• Action
  Find cases

  Searches cases by text in their title or description, optionally narrowed by status, severity, tags, owner, assignee, reporter, category or creation date.

• Action
  Find detection rules

  Finds detection rules in Elastic Security matching a filter, such as by name, tag or enabled state.

• Action
  Get detection rule

  Returns a detection rule's full details, looked up by its internal id or its stable rule_id.

• Action
  Get exception list item

  Returns one exception list item, looked up by its id or its human-readable item ID.

• Action
  Update case

  Updates an existing case's title, description, status, severity, tags, assignees and other fields.

• Action
  Update detection rule

  Updates selected settings of an existing detection rule, leaving any setting you leave blank unchanged. Returns the updated rule.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.