Integrations
Reads from your stack. Writes back.
Connections to the tools your operations and security teams already run — each row says exactly what we read and what we write back. 40 live, 8 in beta, more shipping every week.
40
live integrations
8
in beta
50
total · roadmap included
Cloud + infrastructure
NameStatusReadsWrites back
AWSlive
live
ReadsIAM roles + policies, S3 encryption state, KMS rotation, Config rules, CloudTrail logs
Writes back— read-only credentials by design
Azurelive
live
ReadsEntra ID access state, NSG rules, Defender for Cloud findings, activity logs
Writes back— read-only by design
GCPlive
live
ReadsIAM bindings, KMS key state, Security Command Center findings, audit logs
Writes back— read-only by design
Kubernetes (k8s)beta
beta
ReadsRBAC bindings, NetworkPolicy state, admission-controller config
Writes back—
Terraformlive
live
ReadsPlan + state files; drift detected against the control library
Writes back—
Cloudflarelive
live
ReadsWAF rules, access policies, certificate posture
Writes back—
Identity + access
NameStatusReadsWrites back
Oktalive
live
ReadsUsers, groups, MFA state, sign-in log streams
Writes backAccess-review outcomes; deprovisioning requests via SCIM
Microsoft Entra IDlive
live
ReadsCA policies, group membership, sign-in logs, app registrations
Writes backAccess-review outcomes to group membership
Google Workspacelive
live
ReadsUser + group state, admin role assignments, sharing audit
Writes back—
Auth0live
live
ReadsTenant config, RBAC assignments, log streams
Writes back—
OneLoginbeta
beta
ReadsUser state, MFA enforcement, role assignments
Writes back—
JumpCloudroadmap
roadmap
ReadsScheduled 2026-Q3 · next identity wave
Writes back—
Engineering + change
NameStatusReadsWrites back
GitHublive
live
ReadsBranch protection, code-review state, secret-scanning + Dependabot alerts
Writes back—
GitLablive
live
ReadsApproval rules, MR review coverage, deploy logs
Writes back—
Bitbucketbeta
beta
ReadsBranch permissions, deployment records
Writes back—
Jiralive
live
ReadsTicket state + history as change-management evidence
Writes backTickets for failed control tests; evidence attaches on close
Linearlive
live
ReadsIssue state + cycle history as change evidence
Writes backIssues for failed control tests; closure syncs evidence back
ServiceNowlive
live
ReadsCMDB assets, change-request records
Writes backRemediation tasks routed to the owning group
Vulnerability + security
NameStatusReadsWrites back
Tenablelive
live
ReadsScan findings with asset + plugin context; deduped, prioritized via EPSS + KEV
Writes back—
Qualyslive
live
ReadsDetections + asset tags into the same deduped queue
Writes back—
Wizlive
live
ReadsCloud-posture findings with toxic-combination context
Writes back—
Snyklive
live
ReadsDependency + container findings, fix availability
Writes back—
Dependabotlive
live
ReadsAlerts + fix-PR state via GitHub
Writes back—
Trivylive
live
ReadsContainer + IaC scan results from CI
Writes back—
Microsoft Defenderlive
live
ReadsEndpoint findings, device health state
Writes back—
CrowdStrike Falconlive
live
ReadsEndpoint detections, agent coverage as control evidence
Writes back—
SentinelOnebeta
beta
ReadsEndpoint detections, agent coverage
Writes back—
Pen test + offensive
NameStatusReadsWrites back
HackerOnelive
live
ReadsEngagement scope, findings, researcher reports
Writes backRetest requests; finding state syncs back
Bugcrowdlive
live
ReadsSubmissions + severity from active programs
Writes backTriage decisions; retest requests
Cobaltbeta
beta
ReadsEngagement scope + findings
Writes backRetest requests
Burp Suite Enterpriselive
live
ReadsScan results into the pen test workspace
Writes back—
Contracts + procurement
NameStatusReadsWrites back
DocuSignlive
live
ReadsExecuted envelopes, signer + completion metadata
Writes backContracts sent for signature from the contract module
Adobe Signlive
live
ReadsExecuted agreements + audit trail
Writes backContracts sent for signature
Salesforcelive
live
ReadsOpportunity stage, account + contact records
Writes backContract records on close-won; signed status to the opportunity
HubSpotlive
live
ReadsDeal stage, company records
Writes backContract status back to the deal
Microsoft 365live
live
ReadsWord documents for redline rounds, SharePoint storage
Writes backTracked-changes versions to the document library
Observability + logging
NameStatusReadsWrites back
Datadoglive
live
ReadsMetrics + SLO state; violations surface as control failures
Writes back—
Splunklive
live
ReadsSaved-search results as audit-time log evidence
Writes back—
Sumo Logiclive
live
ReadsScheduled-query results as log evidence
Writes back—
PagerDutylive
live
ReadsIncidents + postmortems, attached to control records
Writes back—
Comms + collaboration
NameStatusReadsWrites back
Slacklive
live
ReadsChannel replies to approvals + evidence requests
Writes backAlerts, approval prompts, evidence requests
Microsoft Teamslive
live
ReadsChannel replies to approvals + evidence requests
Writes backAlerts and approval prompts to channels
Confluencelive
live
ReadsPolicy pages as documentation evidence
Writes backApproved policies published to your space
Zoombeta
beta
ReadsWalkthrough recordings as evidence (with consent)
Writes back—
HR + people
NameStatusReadsWrites back
Workdaylive
live
ReadsHires, transfers, terminations; termination triggers access reviews
Writes back—
Ripplinglive
live
ReadsOnboarding + offboarding events, device assignment
Writes back—
BambooHRbeta
beta
ReadsPeople records, training-completion evidence
Writes back—
Data + warehouses
NameStatusReadsWrites back
Snowflakelive
live
ReadsAccess history, role grants, masking-policy state
Writes back—
BigQuerybeta
beta
ReadsIAM grants, access audit logs
Writes back—
Databricksroadmap
roadmap
ReadsScheduled 2026-Q2
Writes back—
Need an integration we don’t have?
We ship integrations weekly. Tell us your stack and we will tell you straight whether it is on the roadmap, on the back burner, or coming this quarter.
Request an integrationSee it on your stack.
Demo on your real environment, not a sandbox. Bring AWS read-only credentials and one identity-provider connection and we will show you live evidence collection in 30 minutes.