Integration Hub

Connect your entire security stack. Port0 automatically normalizes schemas and correlates telemetry across every source.

All Integrations

322 available

CrowdStrike Falcon

Endpoint (EDR)

Ingest EDR alerts, isolate hosts, and quarantine files automatically.

Palo Alto Cortex XDR

Endpoint (EDR)

Integrate multi-vector alerts and enforce endpoint isolation policies.

SentinelOne

Endpoint (EDR)

Two-way integration for endpoint telemetry and automated remediation actions.

Microsoft Defender

Endpoint (EDR)

Correlate Defender alerts with cloud and network telemetry.

AWS CloudTrail

Cloud Security

Monitor API calls, IAM assume role events, and infrastructure changes.

Google Cloud

Cloud Security

Ingest VPC flow logs and Audit logs directly from GCP.

Azure Resource Manager

Cloud Security

Detect unauthorized Azure infrastructure modifications.

Wiz

Cloud Security

Map vulnerabilities to active alerts and cloud runtime context.

Lacework

Cloud Security

Ingest cloud runtime threats and correlate with identity data.

Orca Security

Cloud Security

Map agentless cloud vulnerabilities to active network threats.

Aqua Security

Cloud Security

Monitor Aqua Security audit logs for unauthorized infrastructure changes and cloud misconfigurations.

Guardicore Centra

Cloud Security

Monitor Guardicore Centra audit logs for unauthorized infrastructure changes and cloud misconfigurations.

Illumio Core

Cloud Security

Monitor Illumio Core audit logs for unauthorized infrastructure changes and cloud misconfigurations.

Versa Networks SASE

Cloud Security

Monitor Versa Networks SASE audit logs for unauthorized infrastructure changes and cloud misconfigurations.

Symantec CloudSOC CASB

Cloud Security

Monitor Symantec CloudSOC CASB audit logs for unauthorized infrastructure changes and cloud misconfigurations.

Forcepoint CASB

Cloud Security

Monitor Forcepoint CASB audit logs for unauthorized infrastructure changes and cloud misconfigurations.

Cisco CloudLock CASB

Cloud Security

Monitor Cisco CloudLock CASB audit logs for unauthorized infrastructure changes and cloud misconfigurations.

F5 Distributed Cloud Services

Cloud Security

Monitor F5 Distributed Cloud Services audit logs for unauthorized infrastructure changes and cloud misconfigurations.

Okta

Identity & Access

Track user logins, suspend sessions, and force MFA challenges.

Microsoft Entra ID

Identity & Access

Detect impossible travel and credential stuffing attacks.

CyberArk

Identity & Access

Track CyberArk authentication events to detect impossible travel and credential abuse.

CyberArk PAM

Identity & Access

Track CyberArk PAM authentication events to detect impossible travel and credential abuse.

CyberArk Privilege Cloud

Identity & Access

Track CyberArk Privilege Cloud authentication events to detect impossible travel and credential abuse.

CyberArk Privileged Threat Analytics

Identity & Access

Track CyberArk Privileged Threat Analytics authentication events to detect impossible travel and credential abuse.

CyberArk EPM

Identity & Access

Track CyberArk EPM authentication events to detect impossible travel and credential abuse.

BeyondTrust BeyondInsight

Identity & Access

Track BeyondTrust BeyondInsight authentication events to detect impossible travel and credential abuse.

BeyondTrust EPM

Identity & Access

Track BeyondTrust EPM authentication events to detect impossible travel and credential abuse.

BeyondTrust Privileged Identity

Identity & Access

Track BeyondTrust Privileged Identity authentication events to detect impossible travel and credential abuse.

BeyondTrust Remote Support

Identity & Access

Track BeyondTrust Remote Support authentication events to detect impossible travel and credential abuse.

BeyondTrust Secure Remote Access

Identity & Access

Track BeyondTrust Secure Remote Access authentication events to detect impossible travel and credential abuse.

Delinea PAM

Identity & Access

Track Delinea PAM authentication events to detect impossible travel and credential abuse.

Delinea Secret Server

Identity & Access

Track Delinea Secret Server authentication events to detect impossible travel and credential abuse.

Delinea Distributed Engine

Identity & Access

Track Delinea Distributed Engine authentication events to detect impossible travel and credential abuse.

RSA Authentication Manager

Identity & Access

Track RSA Authentication Manager authentication events to detect impossible travel and credential abuse.

Broadcom CA PAM

Identity & Access

Track Broadcom CA PAM authentication events to detect impossible travel and credential abuse.

Broadcom Symantec SiteMinder Web Access

Identity & Access

Track Broadcom Symantec SiteMinder Web Access authentication events to detect impossible travel and credential abuse.

CA ACF2

Identity & Access

Track CA ACF2 authentication events to detect impossible travel and credential abuse.

CA LDAP

Identity & Access

Track CA LDAP authentication events to detect impossible travel and credential abuse.

ForgeRock OpenAM

Identity & Access

Track ForgeRock OpenAM authentication events to detect impossible travel and credential abuse.

ForgeRock OpenIDM

Identity & Access

Track ForgeRock OpenIDM authentication events to detect impossible travel and credential abuse.

Micro Focus NetIQ Access Manager

Identity & Access

Track Micro Focus NetIQ Access Manager authentication events to detect impossible travel and credential abuse.

Wallix Bastion

Identity & Access

Track Wallix Bastion authentication events to detect impossible travel and credential abuse.

Symantec VIP Authentication Hub

Identity & Access

Track Symantec VIP Authentication Hub authentication events to detect impossible travel and credential abuse.

Symantec VIP Enterprise Gateway

Identity & Access

Track Symantec VIP Enterprise Gateway authentication events to detect impossible travel and credential abuse.

HID DigitalPersona

Identity & Access

Track HID DigitalPersona authentication events to detect impossible travel and credential abuse.

Ergon Informatik Airlock IAM

Identity & Access

Track Ergon Informatik Airlock IAM authentication events to detect impossible travel and credential abuse.

Aruba ClearPass

Identity & Access

Track Aruba ClearPass authentication events to detect impossible travel and credential abuse.

Akeyless Vault

Identity & Access

Track Akeyless Vault authentication events to detect impossible travel and credential abuse.

CipherTrust Manager

Identity & Access

Track CipherTrust Manager authentication events to detect impossible travel and credential abuse.

Entrust nShield HSM Audit

Identity & Access

Track Entrust nShield HSM Audit authentication events to detect impossible travel and credential abuse.

HashiCorp Audit

Identity & Access

Track HashiCorp Audit authentication events to detect impossible travel and credential abuse.

ManageEngine AD360

Identity & Access

Track ManageEngine AD360 authentication events to detect impossible travel and credential abuse.

ManageEngine ADAudit Plus

Identity & Access

Track ManageEngine ADAudit Plus authentication events to detect impossible travel and credential abuse.

ManageEngine ADManager Plus

Identity & Access

Track ManageEngine ADManager Plus authentication events to detect impossible travel and credential abuse.

Avigilon Access Control Manager

Identity & Access

Track Avigilon Access Control Manager authentication events to detect impossible travel and credential abuse.

Pulse Secure

Identity & Access

Track Pulse Secure authentication events to detect impossible travel and credential abuse.

Array Networks SSL VPN

Identity & Access

Track Array Networks SSL VPN authentication events to detect impossible travel and credential abuse.

Twingate VPN

Identity & Access

Track Twingate VPN authentication events to detect impossible travel and credential abuse.

Cisco ISE

Identity & Access

Track Cisco ISE authentication events to detect impossible travel and credential abuse.

Cisco Secure ACS

Identity & Access

Track Cisco Secure ACS authentication events to detect impossible travel and credential abuse.

Fortinet FortiAuthenticator

Identity & Access

Track Fortinet FortiAuthenticator authentication events to detect impossible travel and credential abuse.

IBM Verify Identity Access

Identity & Access

Track IBM Verify Identity Access authentication events to detect impossible travel and credential abuse.

Palo Alto Networks

Network & Firewall

Block malicious IPs and sinkhole compromised domains instantly.

Zscaler

Network & Firewall

Correlate zero-trust network access logs with endpoint state.

Fortinet

Network & Firewall

Push firewall rules and analyze network traffic anomalies.

Fortinet FortiAnalyzer

Network & Firewall

Pull Fortinet FortiAnalyzer logs to map allowed/denied flows and detect policy violations.

Fortinet FortiManager

Network & Firewall

Pull Fortinet FortiManager logs to map allowed/denied flows and detect policy violations.

Fortinet FortiDDoS

Network & Firewall

Pull Fortinet FortiDDoS logs to map allowed/denied flows and detect policy violations.

Fortinet FortiSASE

Network & Firewall

Pull Fortinet FortiSASE logs to map allowed/denied flows and detect policy violations.

Check Point Firewall

Network & Firewall

Pull Check Point Firewall logs to map allowed/denied flows and detect policy violations.

Check Point Audit

Network & Firewall

Pull Check Point Audit logs to map allowed/denied flows and detect policy violations.

Check Point Harmony

Network & Firewall

Pull Check Point Harmony logs to map allowed/denied flows and detect policy violations.

Check Point SmartDefense

Network & Firewall

Pull Check Point SmartDefense logs to map allowed/denied flows and detect policy violations.

Cisco Firepower NGFW

Network & Firewall

Pull Cisco Firepower NGFW logs to map allowed/denied flows and detect policy violations.

Cisco Firewall Service Module (FWSM)

Network & Firewall

Pull Cisco Firewall Service Module (FWSM) logs to map allowed/denied flows and detect policy violations.

Cisco PIX

Network & Firewall

Pull Cisco PIX logs to map allowed/denied flows and detect policy violations.

Cisco Meraki

Network & Firewall

Pull Cisco Meraki logs to map allowed/denied flows and detect policy violations.

Cisco Stealthwatch

Network & Firewall

Pull Cisco Stealthwatch logs to map allowed/denied flows and detect policy violations.

Cisco Umbrella DNS

Network & Firewall

Pull Cisco Umbrella DNS logs to map allowed/denied flows and detect policy violations.

Cisco Umbrella Cloud Firewall

Network & Firewall

Pull Cisco Umbrella Cloud Firewall logs to map allowed/denied flows and detect policy violations.

Cisco Umbrella IP

Network & Firewall

Pull Cisco Umbrella IP logs to map allowed/denied flows and detect policy violations.

Cisco Umbrella Audit

Network & Firewall

Pull Cisco Umbrella Audit logs to map allowed/denied flows and detect policy violations.

Cisco eStreamer

Network & Firewall

Pull Cisco eStreamer logs to map allowed/denied flows and detect policy violations.

Cisco vManage SD-WAN

Network & Firewall

Pull Cisco vManage SD-WAN logs to map allowed/denied flows and detect policy violations.

Cisco FireSIGHT Management Center

Network & Firewall

Pull Cisco FireSIGHT Management Center logs to map allowed/denied flows and detect policy violations.

Cisco VPN

Network & Firewall

Pull Cisco VPN logs to map allowed/denied flows and detect policy violations.

Cisco Wireless IPS (WIPS)

Network & Firewall

Pull Cisco Wireless IPS (WIPS) logs to map allowed/denied flows and detect policy violations.

Cisco Wireless Security (WiSM)

Network & Firewall

Pull Cisco Wireless Security (WiSM) logs to map allowed/denied flows and detect policy violations.

FireEye NX

Network & Firewall

Pull FireEye NX logs to map allowed/denied flows and detect policy violations.

FireEye NX Audit

Network & Firewall

Pull FireEye NX Audit logs to map allowed/denied flows and detect policy violations.

SonicWall

Network & Firewall

Pull SonicWall logs to map allowed/denied flows and detect policy violations.

WatchGuard Fireware

Network & Firewall

Pull WatchGuard Fireware logs to map allowed/denied flows and detect policy violations.

Juniper Junos

Network & Firewall

Pull Juniper Junos logs to map allowed/denied flows and detect policy violations.

Juniper NetScreen Firewall

Network & Firewall

Pull Juniper NetScreen Firewall logs to map allowed/denied flows and detect policy violations.

Barracuda CloudGen Firewall

Network & Firewall

Pull Barracuda CloudGen Firewall logs to map allowed/denied flows and detect policy violations.

Hillstone Firewall

Network & Firewall

Pull Hillstone Firewall logs to map allowed/denied flows and detect policy violations.

OPNsense Firewall

Network & Firewall

Pull OPNsense Firewall logs to map allowed/denied flows and detect policy violations.

pfSense

Network & Firewall

Pull pfSense logs to map allowed/denied flows and detect policy violations.

Sophos XG Firewall

Network & Firewall

Pull Sophos XG Firewall logs to map allowed/denied flows and detect policy violations.

Sophos UTM

Network & Firewall

Pull Sophos UTM logs to map allowed/denied flows and detect policy violations.

Forcepoint NGFW

Network & Firewall

Pull Forcepoint NGFW logs to map allowed/denied flows and detect policy violations.

McAfee Firewall Enterprise

Network & Firewall

Pull McAfee Firewall Enterprise logs to map allowed/denied flows and detect policy violations.

AMD Pensando DSS Firewall

Network & Firewall

Pull AMD Pensando DSS Firewall logs to map allowed/denied flows and detect policy violations.

Azion Firewall

Network & Firewall

Pull Azion Firewall logs to map allowed/denied flows and detect policy violations.

Cato Networks

Network & Firewall

Pull Cato Networks logs to map allowed/denied flows and detect policy violations.

Fidelis Network

Network & Firewall

Pull Fidelis Network logs to map allowed/denied flows and detect policy violations.

VyOS

Network & Firewall

Pull VyOS logs to map allowed/denied flows and detect policy violations.

F5 AFM

Network & Firewall

Pull F5 AFM logs to map allowed/denied flows and detect policy violations.

F5 VPN

Network & Firewall

Pull F5 VPN logs to map allowed/denied flows and detect policy violations.

Palo Alto Networks Traps

Network & Firewall

Pull Palo Alto Networks Traps logs to map allowed/denied flows and detect policy violations.

Proofpoint

Email Security

Extract suspicious URLs and attachments from reported emails.

Mimecast

Email Security

Analyze VIP targeting and BEC campaign indicators.

Trend Micro Email Security

Email Security

Extract suspicious URLs and attachments from Trend Micro Email Security reported emails.

Fortinet FortiMail

Email Security

Extract suspicious URLs and attachments from Fortinet FortiMail reported emails.

FireEye ETP

Email Security

Extract suspicious URLs and attachments from FireEye ETP reported emails.

FireEye eMPS

Email Security

Extract suspicious URLs and attachments from FireEye eMPS reported emails.

Barracuda Email Security Gateway

Email Security

Extract suspicious URLs and attachments from Barracuda Email Security Gateway reported emails.

Cisco IronPort

Email Security

Extract suspicious URLs and attachments from Cisco IronPort reported emails.

Cisco Secure Email Gateway

Email Security

Extract suspicious URLs and attachments from Cisco Secure Email Gateway reported emails.

Forcepoint Email Security

Email Security

Extract suspicious URLs and attachments from Forcepoint Email Security reported emails.

Forcepoint Mail Relay

Email Security

Extract suspicious URLs and attachments from Forcepoint Mail Relay reported emails.

Voltage SecureMail

Email Security

Extract suspicious URLs and attachments from Voltage SecureMail reported emails.

Tenable

Vulnerability Management

Map exposed CVEs against active network exploitation attempts.

Qualys

Vulnerability Management

Ingest host vulnerability posture for triage context.

Rapid7

Vulnerability Management

Analyze vulnerability scan data and prioritize patching.

Snyk

Vulnerability Management

Track application vulnerabilities from code to cloud runtime.

Tripwire

Vulnerability Management

Map Tripwire exposed CVEs against active network exploitation attempts.

Broadcom SSL VA

Vulnerability Management

Map Broadcom SSL VA exposed CVEs against active network exploitation attempts.

Splunk

SIEM & Log Management

Bi-directional query execution and alert generation.

Elastic

SIEM & Log Management

Query Elasticsearch clusters via natural language.

Exabeam

SIEM & Log Management

Enhance behavioral analytics with cross-platform identity context.

Panther

SIEM & Log Management

Ingest real-time cloud detections and correlate with host data.

ArcSight CEF

SIEM & Log Management

Bi-directionally sync alerts and query ArcSight CEF data via natural language.

AlgoSec Security Management

SIEM & Log Management

Bi-directionally sync alerts and query AlgoSec Security Management data via natural language.

Corelight Sensor

SIEM & Log Management

Bi-directionally sync alerts and query Corelight Sensor data via natural language.

AlphaSOC Alert

SIEM & Log Management

Bi-directionally sync alerts and query AlphaSOC Alert data via natural language.

Wazuh

SIEM & Log Management

Bi-directionally sync alerts and query Wazuh data via natural language.

Fortra Powertech SIEM Agent

SIEM & Log Management

Bi-directionally sync alerts and query Fortra Powertech SIEM Agent data via natural language.

ntopng

SIEM & Log Management

Bi-directionally sync alerts and query ntopng data via natural language.

Broadcom Support Portal Audit

SIEM & Log Management

Bi-directionally sync alerts and query Broadcom Support Portal Audit data via natural language.

BMC AMI Defender

SIEM & Log Management

Bi-directionally sync alerts and query BMC AMI Defender data via natural language.

BMC Helix Discovery

SIEM & Log Management

Bi-directionally sync alerts and query BMC Helix Discovery data via natural language.

Archer IRM

SIEM & Log Management

Bi-directionally sync alerts and query Archer IRM data via natural language.

Linux auditd and AIX Systems

SIEM & Log Management

Bi-directionally sync alerts and query Linux auditd and AIX Systems data via natural language.

Nix Systems Red Hat

SIEM & Log Management

Bi-directionally sync alerts and query Nix Systems Red Hat data via natural language.

Nix Systems Ubuntu Server

SIEM & Log Management

Bi-directionally sync alerts and query Nix Systems Ubuntu Server data via natural language.

Semgrep

Application Security

Correlate SAST findings with active runtime threats.

Arnica

Application Security

Analyze hardcoded secrets and anomalous code pushes.

Aikido Security

Application Security

Map open-source dependencies to runtime exploitation.

JFrog Artifactory

Application Security

Correlate JFrog Artifactory findings with active runtime threats.

File Scanning Framework

Application Security

Correlate File Scanning Framework findings with active runtime threats.

Epic Systems

Application Security

Correlate Epic Systems findings with active runtime threats.

Armis

Asset Management

Discover unmanaged devices and correlate with network flows.

Trellix DLP

Data Protection & DLP

Monitor Trellix DLP for unauthorized data exfiltration and policy violations.

Forcepoint DLP

Data Protection & DLP

Monitor Forcepoint DLP for unauthorized data exfiltration and policy violations.

Symantec DLP

Data Protection & DLP

Monitor Symantec DLP for unauthorized data exfiltration and policy violations.

Symantec Event Export

Data Protection & DLP

Monitor Symantec Event Export for unauthorized data exfiltration and policy violations.

Fortra Digital Guardian DLP

Data Protection & DLP

Monitor Fortra Digital Guardian DLP for unauthorized data exfiltration and policy violations.

Endpoint Protector DLP

Data Protection & DLP

Monitor Endpoint Protector DLP for unauthorized data exfiltration and policy violations.

Kaseya Datto File Protection

Data Protection & DLP

Monitor Kaseya Datto File Protection for unauthorized data exfiltration and policy violations.

Kiteworks

Data Protection & DLP

Monitor Kiteworks for unauthorized data exfiltration and policy violations.

Varonis

Data Protection & DLP

Monitor Varonis for unauthorized data exfiltration and policy violations.

Akamai WAF

Web Security

Analyze Akamai WAF traffic for malicious payloads and automated bot activity.

Akamai SIEM Connector

Web Security

Analyze Akamai SIEM Connector traffic for malicious payloads and automated bot activity.

Akamai Cloud Monitor

Web Security

Analyze Akamai Cloud Monitor traffic for malicious payloads and automated bot activity.

Akamai DNS

Web Security

Analyze Akamai DNS traffic for malicious payloads and automated bot activity.

Akamai DataStream 2

Web Security

Analyze Akamai DataStream 2 traffic for malicious payloads and automated bot activity.

Akamai EAA

Web Security

Analyze Akamai EAA traffic for malicious payloads and automated bot activity.

McAfee Web Gateway

Web Security

Analyze McAfee Web Gateway traffic for malicious payloads and automated bot activity.

Blue Coat ProxySG

Web Security

Analyze Blue Coat ProxySG traffic for malicious payloads and automated bot activity.

Symantec WSS

Web Security

Analyze Symantec WSS traffic for malicious payloads and automated bot activity.

Symantec Web Isolation

Web Security

Analyze Symantec Web Isolation traffic for malicious payloads and automated bot activity.

Forcepoint Web Security

Web Security

Analyze Forcepoint Web Security traffic for malicious payloads and automated bot activity.

FortiWeb WAF

Web Security

Analyze FortiWeb WAF traffic for malicious payloads and automated bot activity.

Imperva WAF

Web Security

Analyze Imperva WAF traffic for malicious payloads and automated bot activity.

Imperva Advanced Bot Protection

Web Security

Analyze Imperva Advanced Bot Protection traffic for malicious payloads and automated bot activity.

Imperva Attack Analytics

Web Security

Analyze Imperva Attack Analytics traffic for malicious payloads and automated bot activity.

Imperva Audit Trail

Web Security

Analyze Imperva Audit Trail traffic for malicious payloads and automated bot activity.

Imperva CEF

Web Security

Analyze Imperva CEF traffic for malicious payloads and automated bot activity.

Imperva Data Risk Analytics (DRA)

Web Security

Analyze Imperva Data Risk Analytics (DRA) traffic for malicious payloads and automated bot activity.

Imperva FlexProtect

Web Security

Analyze Imperva FlexProtect traffic for malicious payloads and automated bot activity.

Imperva SecureSphere Management

Web Security

Analyze Imperva SecureSphere Management traffic for malicious payloads and automated bot activity.

Radware WAF

Web Security

Analyze Radware WAF traffic for malicious payloads and automated bot activity.

Signal Sciences WAF

Web Security

Analyze Signal Sciences WAF traffic for malicious payloads and automated bot activity.

Fastly CDN

Web Security

Analyze Fastly CDN traffic for malicious payloads and automated bot activity.

Fastly WAF

Web Security

Analyze Fastly WAF traffic for malicious payloads and automated bot activity.

Edgio WAF

Web Security

Analyze Edgio WAF traffic for malicious payloads and automated bot activity.

VMware Avi Load Balancer WAF

Web Security

Analyze VMware Avi Load Balancer WAF traffic for malicious payloads and automated bot activity.

DNSFilter

Web Security

Analyze DNSFilter traffic for malicious payloads and automated bot activity.

BloxOne Threat Defense

Web Security

Analyze BloxOne Threat Defense traffic for malicious payloads and automated bot activity.

Barracuda WAF

Web Security

Analyze Barracuda WAF traffic for malicious payloads and automated bot activity.

Barracuda Web Filter

Web Security

Analyze Barracuda Web Filter traffic for malicious payloads and automated bot activity.

Cisco Umbrella Web Proxy

Web Security

Analyze Cisco Umbrella Web Proxy traffic for malicious payloads and automated bot activity.

Cisco Web Security Appliance (WSA)

Web Security

Analyze Cisco Web Security Appliance (WSA) traffic for malicious payloads and automated bot activity.

F5 BIG-IP ASM

Web Security

Analyze F5 BIG-IP ASM traffic for malicious payloads and automated bot activity.

F5 ASM

Web Security

Analyze F5 ASM traffic for malicious payloads and automated bot activity.

F5 Shape

Web Security

Analyze F5 Shape traffic for malicious payloads and automated bot activity.

F5 Silverline

Web Security

Analyze F5 Silverline traffic for malicious payloads and automated bot activity.

Arista Switch

Network Infrastructure

Pull Arista Switch logs to map allowed/denied flows and detect policy violations.

Aruba Switch

Network Infrastructure

Pull Aruba Switch logs to map allowed/denied flows and detect policy violations.

Aruba EdgeConnect SD-WAN

Network Infrastructure

Pull Aruba EdgeConnect SD-WAN logs to map allowed/denied flows and detect policy violations.

Aruba IPS

Network Infrastructure

Pull Aruba IPS logs to map allowed/denied flows and detect policy violations.

Aruba Wireless Controller and Access Point

Network Infrastructure

Pull Aruba Wireless Controller and Access Point logs to map allowed/denied flows and detect policy violations.

HPE Aruba Networking Central

Network Infrastructure

Pull HPE Aruba Networking Central logs to map allowed/denied flows and detect policy violations.

HPE BladeSystem c7000

Network Infrastructure

Pull HPE BladeSystem c7000 logs to map allowed/denied flows and detect policy violations.

HP ProCurve

Network Infrastructure

Pull HP ProCurve logs to map allowed/denied flows and detect policy violations.

Alcatel Switch

Network Infrastructure

Pull Alcatel Switch logs to map allowed/denied flows and detect policy violations.

Brocade ServerIron

Network Infrastructure

Pull Brocade ServerIron logs to map allowed/denied flows and detect policy violations.

Brocade Switch

Network Infrastructure

Pull Brocade Switch logs to map allowed/denied flows and detect policy violations.

Dell Switch

Network Infrastructure

Pull Dell Switch logs to map allowed/denied flows and detect policy violations.

Extreme Switch

Network Infrastructure

Pull Extreme Switch logs to map allowed/denied flows and detect policy violations.

Extreme Wireless

Network Infrastructure

Pull Extreme Wireless logs to map allowed/denied flows and detect policy violations.

Nokia Router

Network Infrastructure

Pull Nokia Router logs to map allowed/denied flows and detect policy violations.

Yamaha Router

Network Infrastructure

Pull Yamaha Router logs to map allowed/denied flows and detect policy violations.

Ubiquiti Unifi Switch

Network Infrastructure

Pull Ubiquiti Unifi Switch logs to map allowed/denied flows and detect policy violations.

Big Switch BigCloudFabric

Network Infrastructure

Pull Big Switch BigCloudFabric logs to map allowed/denied flows and detect policy violations.

Cambium Networks

Network Infrastructure

Pull Cambium Networks logs to map allowed/denied flows and detect policy violations.

H3C Comware Platform Switch

Network Infrastructure

Pull H3C Comware Platform Switch logs to map allowed/denied flows and detect policy violations.

A10 Network Load Balancer

Network Infrastructure

Pull A10 Network Load Balancer logs to map allowed/denied flows and detect policy violations.

Kemp Load Balancer

Network Infrastructure

Pull Kemp Load Balancer logs to map allowed/denied flows and detect policy violations.

F5 BIG-IP LTM

Network Infrastructure

Pull F5 BIG-IP LTM logs to map allowed/denied flows and detect policy violations.

F5 BIG-IP APM

Network Infrastructure

Pull F5 BIG-IP APM logs to map allowed/denied flows and detect policy violations.

F5 DNS

Network Infrastructure

Pull F5 DNS logs to map allowed/denied flows and detect policy violations.

Digi Modems

Network Infrastructure

Pull Digi Modems logs to map allowed/denied flows and detect policy violations.

HAProxy

Network Infrastructure

Pull HAProxy logs to map allowed/denied flows and detect policy violations.

NGINX

Network Infrastructure

Pull NGINX logs to map allowed/denied flows and detect policy violations.

Infoblox

Network Infrastructure

Pull Infoblox logs to map allowed/denied flows and detect policy violations.

EfficientIP DDI

Network Infrastructure

Pull EfficientIP DDI logs to map allowed/denied flows and detect policy violations.

BlueCat DDI

Network Infrastructure

Pull BlueCat DDI logs to map allowed/denied flows and detect policy violations.

BlueCat Edge

Network Infrastructure

Pull BlueCat Edge logs to map allowed/denied flows and detect policy violations.

Netscaler

Network Infrastructure

Pull Netscaler logs to map allowed/denied flows and detect policy violations.

ExtraHop DNS

Network Infrastructure

Pull ExtraHop DNS logs to map allowed/denied flows and detect policy violations.

ExtraHop RevealX

Network Infrastructure

Pull ExtraHop RevealX logs to map allowed/denied flows and detect policy violations.

Netscout Arbor Sightline

Network Infrastructure

Pull Netscout Arbor Sightline logs to map allowed/denied flows and detect policy violations.

Arbor Edge Defense

Network Infrastructure

Pull Arbor Edge Defense logs to map allowed/denied flows and detect policy violations.

Avaya Aura

Network Infrastructure

Pull Avaya Aura logs to map allowed/denied flows and detect policy violations.

Cisco IOS

Network Infrastructure

Pull Cisco IOS logs to map allowed/denied flows and detect policy violations.

Cisco Wireless LAN Controller (WLC)

Network Infrastructure

Pull Cisco Wireless LAN Controller (WLC) logs to map allowed/denied flows and detect policy violations.

Cisco APIC

Network Infrastructure

Pull Cisco APIC logs to map allowed/denied flows and detect policy violations.

Cisco Application Centric Infrastructure (ACI)

Network Infrastructure

Pull Cisco Application Centric Infrastructure (ACI) logs to map allowed/denied flows and detect policy violations.

Cisco Application Control Engine (ACE)

Network Infrastructure

Pull Cisco Application Control Engine (ACE) logs to map allowed/denied flows and detect policy violations.

Cisco CTS

Network Infrastructure

Pull Cisco CTS logs to map allowed/denied flows and detect policy violations.

Cisco CallManager

Network Infrastructure

Pull Cisco CallManager logs to map allowed/denied flows and detect policy violations.

Cisco DNA Center Platform

Network Infrastructure

Pull Cisco DNA Center Platform logs to map allowed/denied flows and detect policy violations.

Cisco Prime

Network Infrastructure

Pull Cisco Prime logs to map allowed/denied flows and detect policy violations.

Cisco Router

Network Infrastructure

Pull Cisco Router logs to map allowed/denied flows and detect policy violations.

Cisco Switch

Network Infrastructure

Pull Cisco Switch logs to map allowed/denied flows and detect policy violations.

Cisco UCS

Network Infrastructure

Pull Cisco UCS logs to map allowed/denied flows and detect policy violations.

Cisco VCS

Network Infrastructure

Pull Cisco VCS logs to map allowed/denied flows and detect policy violations.

Cisco Vision Dynamic Signage Director

Network Infrastructure

Pull Cisco Vision Dynamic Signage Director logs to map allowed/denied flows and detect policy violations.

Fortinet Switch

Network Infrastructure

Pull Fortinet Switch logs to map allowed/denied flows and detect policy violations.

Sophos DHCP

Network Infrastructure

Pull Sophos DHCP logs to map allowed/denied flows and detect policy violations.

ADVA Fiber Service Platform

Network Infrastructure

Pull ADVA Fiber Service Platform logs to map allowed/denied flows and detect policy violations.

AIX System

Network Infrastructure

Pull AIX System logs to map allowed/denied flows and detect policy violations.

FileZilla FTP

Network Infrastructure

Pull FileZilla FTP logs to map allowed/denied flows and detect policy violations.

CrushFTP

Network Infrastructure

Pull CrushFTP logs to map allowed/denied flows and detect policy violations.

VanDyke VShell SFTP

Network Infrastructure

Pull VanDyke VShell SFTP logs to map allowed/denied flows and detect policy violations.

Snipe-IT

Network Infrastructure

Pull Snipe-IT logs to map allowed/denied flows and detect policy violations.

Claroty CTD

IoT & OT Security

Discover and monitor Claroty CTD devices for anomalous network behavior.

Claroty xDome

IoT & OT Security

Discover and monitor Claroty xDome devices for anomalous network behavior.

CyberX

IoT & OT Security

Discover and monitor CyberX devices for anomalous network behavior.

Cyolo OT

IoT & OT Security

Discover and monitor Cyolo OT devices for anomalous network behavior.

Forescout NAC

IoT & OT Security

Discover and monitor Forescout NAC devices for anomalous network behavior.

Darktrace

IoT & OT Security

Discover and monitor Darktrace devices for anomalous network behavior.

Cyber 2.0 IDS

IoT & OT Security

Discover and monitor Cyber 2.0 IDS devices for anomalous network behavior.

Snort

IoT & OT Security

Discover and monitor Snort devices for anomalous network behavior.

Suricata Eve

IoT & OT Security

Discover and monitor Suricata Eve devices for anomalous network behavior.

Falco IDS

IoT & OT Security

Discover and monitor Falco IDS devices for anomalous network behavior.

AIDE

IoT & OT Security

Discover and monitor AIDE devices for anomalous network behavior.

OpenCanary

IoT & OT Security

Discover and monitor OpenCanary devices for anomalous network behavior.

Thinkst Canary

IoT & OT Security

Discover and monitor Thinkst Canary devices for anomalous network behavior.

Acalvio

IoT & OT Security

Discover and monitor Acalvio devices for anomalous network behavior.

Attivo Networks BOTsink

IoT & OT Security

Discover and monitor Attivo Networks BOTsink devices for anomalous network behavior.

Active Countermeasures AI-Hunter

IoT & OT Security

Discover and monitor Active Countermeasures AI-Hunter devices for anomalous network behavior.

Vectra Detect

IoT & OT Security

Discover and monitor Vectra Detect devices for anomalous network behavior.

Vectra Stream

IoT & OT Security

Discover and monitor Vectra Stream devices for anomalous network behavior.

Oracle DB

Database Security

Audit Oracle DB queries to detect unauthorized access and data dumping.

MySQL

Database Security

Audit MySQL queries to detect unauthorized access and data dumping.

IBM DB2

Database Security

Audit IBM DB2 queries to detect unauthorized access and data dumping.

IBM Informix

Database Security

Audit IBM Informix queries to detect unauthorized access and data dumping.

IBM Guardium

Database Security

Audit IBM Guardium queries to detect unauthorized access and data dumping.

IBM AS/400

Database Security

Audit IBM AS/400 queries to detect unauthorized access and data dumping.

Apache Cassandra

Database Security

Audit Apache Cassandra queries to detect unauthorized access and data dumping.

Apache Hadoop

Database Security

Audit Apache Hadoop queries to detect unauthorized access and data dumping.

Imperva Database

Database Security

Audit Imperva Database queries to detect unauthorized access and data dumping.

Veeam

Backup & Recovery

Monitor Veeam for ransomware encryption patterns and unauthorized deletion.

Veritas NetBackup

Backup & Recovery

Monitor Veritas NetBackup for ransomware encryption patterns and unauthorized deletion.

Commvault

Backup & Recovery

Monitor Commvault for ransomware encryption patterns and unauthorized deletion.

Cohesity

Backup & Recovery

Monitor Cohesity for ransomware encryption patterns and unauthorized deletion.

Dell CyberSense

Backup & Recovery

Monitor Dell CyberSense for ransomware encryption patterns and unauthorized deletion.

Dell EMC Data Domain

Backup & Recovery

Monitor Dell EMC Data Domain for ransomware encryption patterns and unauthorized deletion.

Dell EMC Isilon NAS

Backup & Recovery

Monitor Dell EMC Isilon NAS for ransomware encryption patterns and unauthorized deletion.

Dell EMC PowerStore

Backup & Recovery

Monitor Dell EMC PowerStore for ransomware encryption patterns and unauthorized deletion.

Dell ECS

Backup & Recovery

Monitor Dell ECS for ransomware encryption patterns and unauthorized deletion.

Dell OpenManage

Backup & Recovery

Monitor Dell OpenManage for ransomware encryption patterns and unauthorized deletion.

NetApp ONTAP

Backup & Recovery

Monitor NetApp ONTAP for ransomware encryption patterns and unauthorized deletion.

NetApp SAN

Backup & Recovery

Monitor NetApp SAN for ransomware encryption patterns and unauthorized deletion.

Hitachi Content Platform

Backup & Recovery

Monitor Hitachi Content Platform for ransomware encryption patterns and unauthorized deletion.

Cloudian HyperStore

Backup & Recovery

Monitor Cloudian HyperStore for ransomware encryption patterns and unauthorized deletion.

Nasuni File Services Platform

Backup & Recovery

Monitor Nasuni File Services Platform for ransomware encryption patterns and unauthorized deletion.

Synology

Backup & Recovery

Monitor Synology for ransomware encryption patterns and unauthorized deletion.

VMware ESXi

Virtualization

Track VMware ESXi infrastructure changes and correlate with lateral movement.

VMware vCenter

Virtualization

Track VMware vCenter infrastructure changes and correlate with lateral movement.

VMware vSphere

Virtualization

Track VMware vSphere infrastructure changes and correlate with lateral movement.

VMware NSX Manager

Virtualization

Track VMware NSX Manager infrastructure changes and correlate with lateral movement.

VMware Horizon

Virtualization

Track VMware Horizon infrastructure changes and correlate with lateral movement.

VMware Airwatch

Virtualization

Track VMware Airwatch infrastructure changes and correlate with lateral movement.

VMware Tanzu

Virtualization

Track VMware Tanzu infrastructure changes and correlate with lateral movement.

VMware VeloCloud SD-WAN

Virtualization

Track VMware VeloCloud SD-WAN infrastructure changes and correlate with lateral movement.

VMware Workspace ONE UEM

Virtualization

Track VMware Workspace ONE UEM infrastructure changes and correlate with lateral movement.

VMware vRealize

Virtualization

Track VMware vRealize infrastructure changes and correlate with lateral movement.

Citrix Analytics

Virtualization

Track Citrix Analytics infrastructure changes and correlate with lateral movement.

Citrix Monitor Service

Virtualization

Track Citrix Monitor Service infrastructure changes and correlate with lateral movement.

Citrix StoreFront

Virtualization

Track Citrix StoreFront infrastructure changes and correlate with lateral movement.

Nutanix Prism

Virtualization

Track Nutanix Prism infrastructure changes and correlate with lateral movement.

Jenkins

DevOps & CI/CD

Monitor Jenkins pipelines for hardcoded secrets and anomalous code pushes.

Ansible AWX

DevOps & CI/CD

Monitor Ansible AWX pipelines for hardcoded secrets and anomalous code pushes.

Automation Anywhere

DevOps & CI/CD

Monitor Automation Anywhere pipelines for hardcoded secrets and anomalous code pushes.

Atlassian Confluence

DevOps & CI/CD

Monitor Atlassian Confluence pipelines for hardcoded secrets and anomalous code pushes.

WordPress CMS

DevOps & CI/CD

Monitor WordPress CMS pipelines for hardcoded secrets and anomalous code pushes.

Apache

DevOps & CI/CD

Monitor Apache pipelines for hardcoded secrets and anomalous code pushes.

Apache Tomcat

DevOps & CI/CD

Monitor Apache Tomcat pipelines for hardcoded secrets and anomalous code pushes.

Ready to connect your security stack?

Get full visibility across cloud, SaaS, endpoints, and GenAI in minutes. No agents, no hardware, no disruption.

Get a demo

Integration Hub

Categories

Can't find your tool?

All Integrations

CrowdStrike Falcon

Palo Alto Cortex XDR

SentinelOne

Microsoft Defender

AWS CloudTrail

Google Cloud

Azure Resource Manager

Wiz

Lacework

Orca Security

Aqua Security

Guardicore Centra

Illumio Core

Versa Networks SASE

Symantec CloudSOC CASB

Forcepoint CASB

Cisco CloudLock CASB

F5 Distributed Cloud Services

Okta

Microsoft Entra ID

CyberArk

CyberArk PAM

CyberArk Privilege Cloud

CyberArk Privileged Threat Analytics

CyberArk EPM

BeyondTrust BeyondInsight

BeyondTrust EPM

BeyondTrust Privileged Identity

BeyondTrust Remote Support

BeyondTrust Secure Remote Access

Delinea PAM

Delinea Secret Server

Delinea Distributed Engine

RSA Authentication Manager

Broadcom CA PAM

Broadcom Symantec SiteMinder Web Access

CA ACF2

CA LDAP

ForgeRock OpenAM

ForgeRock OpenIDM

Micro Focus NetIQ Access Manager

Wallix Bastion

Symantec VIP Authentication Hub

Symantec VIP Enterprise Gateway

HID DigitalPersona

Ergon Informatik Airlock IAM

Aruba ClearPass

Akeyless Vault

CipherTrust Manager

Entrust nShield HSM Audit

HashiCorp Audit

ManageEngine AD360

ManageEngine ADAudit Plus

ManageEngine ADManager Plus

Avigilon Access Control Manager

Pulse Secure

Array Networks SSL VPN

Twingate VPN

Cisco ISE

Cisco Secure ACS

Fortinet FortiAuthenticator

IBM Verify Identity Access

Palo Alto Networks

Zscaler

Fortinet

Fortinet FortiAnalyzer

Fortinet FortiManager

Fortinet FortiDDoS

Fortinet FortiSASE

Check Point Firewall

Check Point Audit

Check Point Harmony

Check Point SmartDefense

Cisco Firepower NGFW

Cisco Firewall Service Module (FWSM)

Cisco PIX