Code and AppSec
GitHub
Source code and pull request platform
Enables: Brings code activity and repo signals into the detection layer
Dependabot
Automated dependency and vulnerability scanning
Enables: Surfaces dependency risk signals for detection and triage
Apex
Agentic application security
Enables: Ingests security findings from repos and code workflows
Identity and Access
Okta
Identity and access management
Enables: Feeds authentication and authorization signals for identity-aware triage
JumpCloud
Cloud-based identity and access management
Enables: Feeds directory and identity events for agentic investigation and response
1Password
Password, data and secrets manager
Enables: Sends audit and usage events, and sign-in attempts for monitoring and alerts
Microsoft Entra ID
Cloud-based identity and access management
Enables: Integrates for access and sign-on enforcement
Cloud and Infrastructure
AWS
Cloud infrastructure and services
Enables: Connects cloud events and logs for infrastructure-level detection and response
Cloudflare
Internet infrastructure and security
Enables: Connects notifications for DNS management and incident response
Grafana
Open-source data visualization and analytics
Enables: Sends notifications for agentic triage and response
Endpoint and Device
CrowdStrike Falcon
Endpoint detection and response (EDR)
Enables: Sends endpoint threat detections for unified triage and remediation
SWIF
Device compliance and management
Enables: Brings device compliance status for policy enforcement and governance
Huntress
Endpoint detection and response
Enables: Connects EDR data for alert enrichment and triage
Workspace and Ticketing
Jira
Project management and issue tracking
Enables: Connects Atlassian account for issue creation, and lookup during triage
Linear
Project management and issue tracking
Enables: Connects so agents can create issues during triage
Google Workspace
Business collaboration suite
Enables: Feeds suspicious logins, data exfiltration and device compromise alerts for triage and response