Integrations

EDR devices, detections and Spotlight vulnerabilities from the Falcon platform.

Endpoint agents, threats and device inventory from the Singularity platform.

Managed endpoint inventory and posture from ePolicy Orchestrator.

VMDR host inventory and vulnerability detections from the Qualys Cloud Platform.

Asset and vulnerability data from Tenable.io / Nessus scans.

Assets and vulnerability findings from the InsightVM console.

Users, groups, sign-ins and identity risk from Entra ID (Graph).

Users, groups, factors and system-log events from the Okta directory.

Managed device inventory and compliance from Intune (Graph).

Managed Apple device inventory and posture from Jamf Pro.

Cloud asset inventory and toxic-combination risk from the Wiz graph.

Network clients and managed devices from the Meraki dashboard.

DNS-layer security and destination reputation — enrichment adapter.

Secure web gateway users and policy from Internet Access.

Zero-trust access policy and app segments — enrichment adapter.

Data-loss incidents, policies and forensics — enrichment adapter.

Threat intelligence and risk scores for IOCs — enrichment adapter.

GenAI usage and data-exposure controls — enrichment adapter.

SaaS security posture and AI-agent risk across connected apps.

Configuration items and asset records from the ServiceNow CMDB.

Certificate inventory and expiry from CertCentral — enrichment adapter.

Risk-based analytics signals — enrichment adapter.

File, URL, IP and domain reputation from 70+ AV engines — enrichment.