Connect TheHive to Gmail in two minutes.
Real-time triggers from TheHive, ready-made actions in Gmail. Filter, transform, and route without writing a line of code.
Workflows fire when something happens in TheHive.
- Alert CreatedWebhook
- Case CreatedWebhook
Workflows do something in Gmail, instantly.
- Add Labels to MessageAPI
- Create DraftAPI
- Create LabelAPI
- Delete DraftAPI
- Delete LabelAPI
- Delete MessageAPI
Pick the way that fits your stack.
Pair pages are mirrored. Each direction gets its own dedicated page.
When something happens in TheHive, do it in Gmail.
2 TheHive triggers wired to 27 Gmail actions. Most-used pairing: Alert Created → Add Labels to Message.
Or fire it the other way around.
1 Gmail triggers wired to 3 TheHive actions downstream.
See Gmail → TheHive →Common TheHive → Gmail workflows.
Pick a pairing to set it up in two minutes. Each one is a fully editable recipe.
Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.
Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.
Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.
Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.
Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.
Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.
Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.
Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.
Connect TheHive and Gmail in five steps.
No code, no glue, no half-day setup. Each step is one click.
- 1ConnectAuthorize TheHive and Gmail
Open Tiny Command, authorize TheHive and Gmail once each. Both connections are available to every workflow on your account.
- 2TriggerPick a TheHive trigger
Drop the TheHive → Alert Created trigger onto the canvas. Tiny Command auto-registers the webhook.
POST /v1/webhooks/thehive.trigger-alert-created - 3TransformAdd a filter or AI step
Optionally add a Filter node ("subject contains URGENT") or an AI step ("classify intent") between trigger and action.
- 4ActionAdd the Gmail action
Drop the Gmail → Add Labels to Message action below it. Map fields from the TheHive payload into the Gmail inputs.
google-gmail.add-labels - 5PublishPublish and forget
Hit Publish. Tiny Command runs it in production from second one. Watch the run-log fill up.
Questions about TheHive + Gmail.
How long does it take to connect TheHive and Gmail on Tiny Command?
Is the TheHive ↔ Gmail integration real-time?
Can I filter or transform data between TheHive and Gmail?
What TheHive events can trigger a Gmail workflow?
Do I need a paid plan to use TheHive with Gmail?
What if I want Gmail → TheHive instead?
Other apps that pair well with TheHive.
Wire TheHive to Gmail in 2 minutes.
Free tier available. No credit card. No onboarding call.
