Skip to content
opsnite
Integrations

What we read. And what we’ve proven.

Each row says what opsnite reads, what it writes back, and whether it has run against a real system. 14 connectors are proven, 10 are built and waiting for their first live run, and 13 scan engines run inside opsnite itself.

14

proven against real systems

10

built · first live run pending

13

scan engines run in-product

Cloud

AWSlive
ReadsConfig rules, Security Hub, GuardDuty findings, IAM access-review data, vulnerability findings, AWS compliance agreements
Writes backRead only
Azure + GCP posturebuilt
ReadsCloud-posture findings aggregated alongside AWS once credentials are supplied
Writes backRead only

Identity + access

Microsoft Entra IDlive
ReadsUsers and group membership through Microsoft Graph; Microsoft 365 access reviews
Writes backRead only
Microsoft Intunelive
ReadsDevice compliance state
Writes backRead only
Oktabuilt
ReadsUsers, roles, access reviews
Writes backRead only
SailPointbuilt
ReadsIdentities, roles, access reviews
Writes backRead only
Sign-in (OIDC)live
ReadsPer-tenant sign-in to opsnite with Entra ID, Google or any OIDC provider
Writes backRead only

Tickets + documentation

Jiralive
ReadsTicket state and history as change and SLA evidence
Writes backRead only
Confluencelive
ReadsPolicy pages as documentation evidence
Writes backRead only
ServiceNowbuilt
ReadsTickets
Writes backTickets, two-way sync
Freshservicebuilt
ReadsTickets
Writes backTickets, two-way sync

Security tools

Microsoft Defenderlive
ReadsEndpoint findings and Secure Score
Writes backRead only
Qualysbuilt
ReadsScan findings into the shared findings queue
Writes backRead only
Tenablebuilt
ReadsScan findings into the shared findings queue
Writes backRead only
Rapid7built
ReadsScan findings into the shared findings queue
Writes backRead only
Splunkbuilt
ReadsAlerts
Writes backIncidents
Microsoft Sentinelbuilt
ReadsAlerts
Writes backIncidents

Contracts + documents

DocuSignlive
ReadsExecuted envelopes, imported as agreement records
Writes backNothing. Import only; there is no signing inside opsnite
Cobblestonelive
ReadsContract import
Writes backRead only
SharePointlive
ReadsDocuments as evidence
Writes backRead only
Qualiolive
ReadsDocument inventory, reconciled against your controls
Writes backRead only
Salesforcelive
ReadsRecords collected as evidence
Writes backRead only

Spend + vendors

Expense and spend datalive
ReadsSpend exports, used to find vendors you pay but have not reviewed
Writes backRead only

Notifications

Slacklive
ReadsNothing
Writes backNotifications

Scan engines opsnite runs itself

nucleilive
ReadsKnown CVEs, exposed panels and misconfigurations on web targets (12,958 templates)
Writes backRead only
trivylive
ReadsCVEs in container images, filesystems and IaC
Writes backRead only
prowlerlive
ReadsCloud posture checks for AWS, Azure and GCP (1,306 checks in the catalog)
Writes backRead only
nmaplive
ReadsOpen ports and service versions
Writes backRead only
openscaplive
ReadsSCAP benchmark compliance on hosts
Writes backRead only
lynislive
ReadsHost hardening gaps
Writes backRead only
zaplive
ReadsWeb application DAST findings
Writes backRead only
niktolive
ReadsWeb server misconfigurations and missing security headers
Writes backRead only
kube-benchlive
ReadsCIS Kubernetes benchmark failures
Writes backRead only
openvasbuilt
ReadsNetwork vulnerability scanning. Needs an OpenVAS service you run
Writes backRead only
wazuhbuilt
ReadsHost agent alerts and vulnerability data. Needs a Wazuh manager you run
Writes backRead only
bloodhoundbuilt
ReadsActive Directory attack paths. Needs BloodHound CE; paths are not yet risk-ranked
Writes backRead only
falcobuilt
ReadsRuntime container events. Validated against a stub event source only
Writes backRead only

Need an integration we don’t have?

Tell us your stack. We will tell you straight whether a connector is proven, built but untested against a live system, or not built at all. Wiz, Snyk, GitHub, CrowdStrike and Workday, for example, are not built today.

Request an integration

See it on your stack.

A walkthrough on your own environment. Bring AWS read-only credentials and an Entra ID connection, and we will run evidence collection against your accounts.

Request a walkthrough