METRON’S PORTFOLIO OF SECURITY INTEGRATIONS
Third-party Security Integrations Supported by Metron Security
Metron Advantage
Complete oversight on the end-to-end process of development, customization, app certification, and continued on-demand support.
Metron Security maintains coding standards, merges PR, and coordinates with the security teams for all updates.
Get started within 24 hours with up to 2x-3x cost savings compared to in-house.
Fixed cost and no upfront payment. Invoiced only after delivery.
Category: IAM
1Password is a password management and identity security platform that helps organizations securely store, manage, and share credentials, secrets, and sensitive information while enabling secure access across teams and applications.
Integrations: SamurAI XDR, JupiterOne, CrowdStrike Falcon Fusion
Category: Cloud Email Security
Abnormal Security provides an AI-driven email security platform that detects and blocks phishing, BEC, and social engineering attacks by analyzing behavioral anomalies in cloud email environments.
Integrations: SafeBreach, CrowdStrike Fusion
Category: Endpoint Protection
Acronis Cyber Protect is an integrated cyber protection platform that combines backup, disaster recovery, endpoint security, and ransomware protection to safeguard data and systems.
Integrations: CrowdStrike Falcon Fusion
Category: CMMS
AIMS 3 is a scalable, web-based CMMS software made up of a variety of core components, optional components, and interfaces that provide solutions to meet the needs of your current operation and your needs in the future. With AIMS, users can access all aspects of their maintenance operation from any location with internet access, at any time.
Integrations: Palo Alto Networks - IoT, Palo Alto Networks - Cortex XSOAR (formerly Demisto)
Category: Zero Trust Network Security
Guardicore is a microsegmentation and zero trust security platform that provides deep visibility and control over lateral traffic within data centers and cloud environments. It helps security teams visualize application dependencies, enforce segmentation policies, and prevent the spread of threats by isolating workloads. Guardicore enables granular control down to the process level, supporting zero trust strategies and compliance efforts.
Integrations: SafeBreach
Category: Network Security Policy Management
AlgoSec provides network security policy management and firewall analytics solutions that help organizations automate security policy changes, ensure compliance, and improve network visibility across hybrid environments.
Integrations: Crowdstrike Falcon Fusion
Category: SIEM
Open Threat Exchange is the neighborhood watch of the global intelligence community. It enables private companies, independent security researchers, and government agencies to openly collaborate and share the latest information about emerging threats, attack methods, and malicious actors, promoting greater security across the entire community.
Integrations: Devo, SafeBreach, Dynatrace
Category: TIP
GuardDuty combines ML and integrated threat intelligence from AWS and leading third parties to help protect your AWS accounts, workloads, and data.
Integrations: SentinelOne, SamurAI XDR, Anomali, SevenAI, Crowdstrike Falcon
Category: Data Lake
Amazon Security Lake automatically centralizes security data from AWS environments, SaaS providers, on premises, and cloud sources into a purpose-built data lake stored in your account.
Integrations: Armis, SentinelOne, Expel
Category: IT Ops
AppFabric connects SaaS applications across your organization. IT and security teams can then easily manage and secure applications using a standard schema, and employees can complete everyday tasks faster using generative AI.
Integrations: SentinelOne
Category: CIPS
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and auditing of your AWS account.
Integrations: SentinelOne, SevenAi, Expel, CrowdStrike Falcon Fusion
Category: APM
Amazon CloudWatch is a service that monitors applications, responds to performance changes, optimizes resource use, and provides insights into operational health. By collecting data across AWS resources, CloudWatch gives visibility into system-wide performance and allows users to set alarms, automatically react to changes, and gain a unified view of operational health.
Integrations: SentinelOne, Anomali, CrowdStrike Falcon Fusion
Category: Public Cloud Storage Service
Amazon Simple Storage Service (Amazon S3) is an object storage service offering industry-leading scalability, data availability, security, and performance. S3 is built to store and retrieve any amount of data from anywhere.
Integrations: SentinelOne, Cybereason XDR
Category: CSPM
AWS Security Hub allows you to automate security best practice checks, aggregate security alerts into a single place and format, and understand your overall security posture across all of your AWS accounts.
Integrations: SentinelOne, SentinelOne VPC Parser
AWS ELB
Category: Cloud Infrastructure
AWS ELB is a load balancing service within Amazon Web Services (AWS) that distributes incoming traffic across multiple servers to ensure high availability and scalability of applications.
Integrations: SentinelOne
Category: Cloud Database Management System (CDMS)
Amazon DynamoDB is a serverless, NoSQL, fully managed database with single-digit millisecond performance at any scale.
Integrations: JupiterOne
Category: IT Operations Management
AWS Systems Manager is the operations hub for AWS applications and resources and a secure end-to-end management solution for hybrid and multicloud environments that enables secure operations at scale.
Integrations: JupiterOne
Category: Network Firewall
AWS Network Firewall provides fine-grained control over network traffic with customizable firewall rules. Integrated with AWS Firewall Manager, it centralizes security across VPCs for better protection.
Integrations: JupiterOne, CrowdStrike Falcon
Amazon RDS simplifies database management with automated provisioning, scaling, and backups. It supports multiple engines and offers advanced features for performance optimization and cost management.
Integrations: SentinelOne
AWS IAM
Category: IAM
AWS IAM secures cloud environments with granular access control and policy management. It helps businesses enforce the least privilege, monitor activity, and maintain compliance with robust identity protection features.
Integrations: SentinelOne, CrowdStrike Falcon Fusion
Category: OCSF Map
Amazon Redshift is a fast, scalable data warehouse solution that enables efficient querying and analysis of large datasets, optimizing business intelligence and data-driven decisions.
Integrations: SentinelOne
Category: Serverless
AWS Lambda is a serverless compute service that runs code in response to events without requiring server management.
Integrations: Crowdstrike Falcon Fusion
Category: Secrets Manager
AWS Secrets Manager is a service that securely stores, manages, and retrieves sensitive information such as API keys and database credentials.
Integrations: Crowdstrike Falcon Fusion
AWS ACM
Category: Certificate Management / PKI
AWS Certificate Manager is a managed service that provisions, deploys, and renews SSL/TLS certificates to secure applications and services running on AWS.
Integrations: CrowdStrike Falcon Fusion
Category: Identity & Access Management (IAM)
AWS Access Analyzer helps identify unintended external access to AWS resources by analyzing resource-based policies.
Integrations: CrowdStrike Falcon Fusion
Category: Serverless Analytics
Amazon Athena is a serverless interactive query service that enables analysis of data stored in Amazon S3 using standard SQL.
Integrations: CrowdStrike Falcon Fusion
Category: Cloud Configuration Management
AWS Config enables continuous monitoring, auditing, and evaluation of AWS resource configurations for compliance and governance.
Integrations: CrowdStrike Falcon Fusion
Category: Cloud Governance
AWS Organizations helps centrally manage and govern multiple AWS accounts using consolidated billing and policy-based controls.
Integrations: CrowdStrike Falcon Fusion
AWS SNS
Category: Messaging / Notifications
Amazon Simple Notification Service (SNS) is a fully managed pub/sub messaging service for application-to-application and application-to-person communication.
Integrations: CrowdStrike Falcon Fusion
AWS WAF
Category: Web Application Security
AWS WAF helps protect web applications from common web exploits by allowing customers to create custom security rules.
Integrations: CrowdStrike Falcon Fusion
Category: Identity & Access Management
AWS Cognito provides user authentication, authorization, and user management for web and mobile applications.
Integrations: CrowdStrike Falcon Fusion
Category: NoSQL Database
Amazon DynamoDB is a fully managed, serverless NoSQL key-value and document database designed for high availability and scalability.
Integrations: CrowdStrike Falcon Fusion
Category: Cloud Security Management
AWS Firewall Manager centrally configures and manages firewall rules across AWS accounts and applications.
Integrations: CrowdStrike Falcon Fusion
Category: DDoS Protection
AWS Shield provides managed protection against distributed denial-of-service (DDoS) attacks for AWS workloads.
Integrations: CrowdStrike Falcon Fusion
Category: Workflow Automation
Azure Logic Apps enables organizations to automate workflows and integrate applications, data, and services across cloud and on-premises environments.
Integrations: Keeper Security
Category: Email Security
Barracuda Email Security blocks phishing, ransomware, and other email-borne threats with advanced AI and threat detection capabilities. It also protects sensitive data with encryption and archiving, ensuring email security and compliance.
Integrations: Cybereason XDR, Crowdstrike Falcon Fusion
Category: Cybersecurity Platform
Cybersecurity platform protecting email, applications, networks, endpoints, and business data from advanced threats.
Integrations: Crowdstrike Falcon Fusion
Category: AIOps / Incident Intelligence
BigPanda correlates IT alerts and events to accelerate incident detection and resolution.
Integrations: CrowdStrike Falcon Fusion
Category: EPP, EDR
Bitdefender GravityZone delivers advanced endpoint protection with layered security, including antivirus, anti-malware, EDR, and threat intelligence, designed to safeguard devices against sophisticated cyber threats.
Integrations: JupiterOne, CrowdStrike Falcon Fusion
Category: IoT Security, EPP
CylancePROTECT is an AI-powered endpoint protection platform (EPP) that uses artificial intelligence (AI) and machine learning (ML) to proactively prevent threats, rather than relying on reactive signature-based detection. It works by analyzing the behavior of files and processes to determine whether they are malicious, even if they have never been seen before.
Integrations: Devo
Category: ITSM
BMC Helix is an AI-powered IT operations and service management platform that helps organizations automate incident management, service delivery, observability, and operational workflows across hybrid environments.
Integrations: Palo Alto Networks - IoT
Category: Employee Recognition & Rewards
Bonusly provides employee recognition and rewards, helping organizations improve engagement, collaboration, and workplace culture through peer-to-peer recognition.
Integrations: Crowdstrike Falcon Fusion
Category: Financial Operations
Brex provides corporate cards, expense management, travel, and financial operations tools to help organizations manage business spending efficiently.
Integrations: Crowdstrike Falcon Fusion
Category: Technology Platform
ByteDance is a global internet technology company known for its AI-driven content platforms like TikTok and Douyin.
Integrations: SafeBreach
Category: ASM
Censys is an internet-wide asset discovery and attack surface management platform that scans and catalogs exposed systems and services.
Integrations: Crowdstrike Falcon Fusion
Category: Identity & Access Management (IAM)
Cerby provides identity automation and access management for applications that lack native identity standards, helping organizations strengthen account security and governance.
Integrations: Crowdstrike Falcon Fusion
Category: Static Application Security Testing
Checkmarx is a static application security testing (SAST) platform enabling developers to identify vulnerabilities in source code.
Integrations: Crowdstrike Falcon Fusion, Dynatrace
Category: SOAR
Checkphish offers automated phishing detection and response to help organizations prevent email-based cyber threats.
Integrations: Crowdstrike Falcon Fusion
Category: Infrastructure Automation
Chef Infra automates configuration management, eliminating manual work and keeping infrastructure consistent and compliant throughout its entire lifespan, even in the largest, most complex, and diverse environments.
Integrations: Keeper Security
Category: CI-CD
CircleCI is a continuous integration and continuous delivery platform that automates software testing, building, and deployment workflows for development teams.
Integrations: Crowdstrike Falcon Fusion
Category: DLP, Email Security
Armorblox uses the latest techniques in machine learning (ML) and artificial intelligence (AI) to protect organizations against identity-based attacks and data loss.
Integrations: SentinelOne
Category: Access Management, Identity Services Engine
Cisco Duo is a cloud-based multi-factor authentication (MFA) solution that helps organizations improve their security posture by adding an extra layer of protection to access control. It goes beyond traditional password-based authentication by requiring users to provide a second factor of verification, making it significantly harder for attackers to gain unauthorized access.
Integrations: SentinelOne, Crowdstrike Falcon Fusion
Category: Network Firewall
Cisco Firepower is a comprehensive suite of next-generation firewall (NGFW) and security solutions from Cisco, designed to protect your network against various cyber threats.
Category: Enterprise Wired and Wireless LAN Infrastructure (WLAN)
Cisco Meraki allows you to configure security for Internet-connected devices, routers, switches, firewalls and WiFi networks your company uses through an internet-connected browser.
Integrations: Palo Alto Networks - IoT, SamurAI XDR
Category: Email Security
Cisco Secure Email, formerly known as Cloud Email Security, is a cloud-based email security solution designed to protect your organization from sophisticated phishing attacks, ransomware, and other email-borne threats.
Integrations: Tines, Cybereason XDR, Crowdstrike Falcon Fusion
Category: EPP
Cisco Secure Endpoint is a cloud-delivered endpoint protection platform (EPP) that safeguards your organization's devices against a wide range of cyberthreats. It combines prevention, detection, and response capabilities to protect Windows, macOS, Linux, iOS, and Android devices from malware, ransomware, phishing attacks, zero-day exploits, and other sophisticated threats.
Integrations: Tines, Crowdstrike Falcon Fusion
Category: DLP
Cisco Umbrella is a cloud-delivered security platform that offers comprehensive protection against threats at the DNS (Domain Name System) and IP (Internet Protocol) layers. It acts as a first line of defense, blocking threats before they reach your network or endpoints, and provides broad visibility and control over internet access.
Integrations: Tines
Category: Enterprise Wired and Wireless LAN Infrastructure
Cisco WLC, which stands for Wireless LAN Controller, plays a crucial role in managing and orchestrating Cisco wireless access points (APs) within a network. It's the brains behind the operation, providing centralized control, security, and optimization for your Wi-Fi environment.
Integrations: Palo Alto Networks - IoT
Category: Firewall
Cisco Secure Firewall ASA offers robust, multi-layered network security with advanced threat defense. It combines VPN capabilities, intrusion prevention, and application-layer protection to ensure a secure and seamless user experience.
Integrations: Anomali
Category: Identity Security
Cisco ISE enforces policy-based access control across your network. It provides dynamic profiling, zero-trust enforcement, and advanced security analytics to ensure compliance and secure device and user access.
Integrations: Anomali
Category: Threat Intelligence
Cisco Secure Malware Analytics provides advanced threat detection and analysis by leveraging sandboxing technology to identify and mitigate sophisticated malware threats in real time.
Integrations: SentinelOne, CrowdStrike Falcon Fusion
Category: Network Security Firewall
Cisco ASA is a network security appliance providing firewall, VPN, and intrusion prevention capabilities for enterprise networks.
Integrations: Crowdstrike Falcon Fusion
Category: Network Firewall
Cisco ASA is a network security firewall that provides access control, threat prevention, and VPN services for enterprise networks.
Integrations: Expel
Category: Network & Internet Monitoring
Cisco ThousandEyes provides end-to-end visibility into network, cloud, and internet performance to help organizations detect, diagnose, and resolve connectivity and application issues.
Integrations: CrowdStrike Falcon Fusion
Category: Vulnerability Management
Cisco Vulnerability Management identifies, prioritizes, and manages vulnerabilities across enterprise environments.
Integrations: CrowdStrike Falcon Fusion
Category: Vulnerability & Exposure Management
CrowdStrike Vulnerability Management provides continuous vulnerability assessment, asset visibility, and risk-based prioritization to help organizations identify and remediate security exposures.
Integrations: SafeBreach
Category: Digital Risk Protection
CybelAngel identifies and monitors exposed digital assets, leaked data, and external threats to help organizations reduce their external attack surface and prevent data leaks.
Integrations: CrowdStrike Falcon Fusion
Category: TIP
Cyber Insurance is a contract an entity can purchase to help reduce the financial risks associated with doing business online. In exchange for a monthly or quarterly fee, the insurance policy transfers some of the risks to the insurer.
Integrations: SentinelOne
CyberArk
Category: OT Security, Access Management
CyberArk offers extensible identity security platform, protecting identities and critical assets by enabling zero trust and enforcing least privilege.
Integrations: CrowdStrike Falcon Fusion
Category: Access Management
CyberArk Endpoint Privilege Manager (EPM) helps remove local admin rights while improving user experience and optimizing IT operations.
Integrations: SentinelOne, SafeBreach, JupiterOne,
Category: DLP
Cyberhaven provides advanced data loss prevention (DLP) by tracking how sensitive data moves and is used, enabling real-time detection of insider threats and policy violations.
Integrations: JupiterOne
Category: Threat Intelligence
Cybersixgill provides cyber threat intelligence from the deep and dark web, helping organizations identify emerging threats, leaked credentials, and malicious activity.
Integrations: Crowdstrike Falcon Fusion
Category: External Attack Surface Management (EASM)
CyCognito tackles a crucial yet often overlooked aspect of cybersecurity: understanding your external attack surface. Imagine it as a comprehensive threat map of everything attackers could potentially target – websites, apps, misconfigured resources, exposed data, and even forgotten assets.
Category: DSPM
Cyera offers a Data Security Posture Management (DSPM) solution that provides businesses with comprehensive insights into their sensitive data and associated security risks.
Integrations: SentinelOne
Category: CPS Protection Platform
Cylus, also known as CylusOne, is a specialized cybersecurity platform designed to protect operational technologies (OT) used in critical infrastructure sectors like rail, energy, and water treatment. Unlike traditional IT security solutions, Cylus understands the unique characteristics and vulnerabilities of OT systems, offering targeted protection against cyberattacks specifically targeting these environments.
Integrations: ServiceNow
Category: NDR, OT Security, CPS Protection Platform, Email Security
Darktrace addresses the challenge of insider threat and advanced cyber-attacks through its unique ability to detect previously unidentified threats in real time, as manifested in the emerging behaviors of the network, devices and individuals.
Integrations: SafeBreach, SentinelOne, Crowdstrike Falcon Fusion
Category: Cloud Monitoring
DataDog is a monitoring and analytics platform for cloud infrastructure, applications, and logs that enables real-time observability and alerting.
Integrations: JupiterOne, CrowdStrike, Doppel
Category: Communication platform
Discord is a communication platform for voice, video, and text, widely used by gaming and community groups.
Integrations: Crowdstrike Falcon Fusion
Category: Supply Chain Security
Docker Scout analyzes container images to identify vulnerabilities, assess software supply chain risks, and provide remediation guidance.
Integrations: Dynatrace
Category: Digital Risk Protection Platform
Doppel provides AI-powered threat detection and takedown across domains, social media, and digital marketplaces, offering comprehensive, automated protection against external threats in real-time.
Integrations: Google SecOps (formerly Google Chronicle), Splunk, Sumo Logic, Microsoft Sentinel, Open CTI, ServiceNow, Jira, Datadog, Tines, Elastic Security, ThreatQuotient, ThreatConnect, Anomali, IBM Qradar, CrowdStrike Falcon Fusion
Category: Cloud Storage
Dropbox is a cloud file storage and collaboration platform that enables secure file sharing and synchronization across devices.
Integrations: Crowdstrike Falcon Fusion
Category: Application Performance Monitoring
Dynatrace provides AI-driven monitoring of applications, infrastructure, and user experience.
Integrations: CrowdStrike Falcon Fusion, Docker Scout, GitLab, Checkmarx, CrowdStrike Falcon Intel, AlienVault, Recorded Future, STIX TAXII, Cortex XDR, Microsoft Defender XDR
Category: SIEM, EDR, EPP
The Elastic Stack, also known as the ELK Stack, is a powerful and open-source platform for searching, analyzing, and visualizing data of all shapes and sizes.
Integrations: HP
Category: Search & Analytics Engine
Elasticsearch is a powerful search and analytics engine designed for fast, scalable data exploration, enabling real-time search, logging, and data visualization across large datasets.
Integrations: JupiterOne, SevenAI
Category: Security Analytics & Visualization
Kibana provides interactive dashboards and data visualization for Elasticsearch, enabling organizations to analyze logs, metrics, security events, and operational data.
Integrations: SpecterOps
Category: Email Security & Verification
EmailHippo provides email verification and validation services to improve data quality and protect organizations from invalid or fraudulent email addresses.
Integrations: Crowdstrike Falcon Fusion
Category: SIEM
Exabeam provides a cloud-native architecture for rapid data ingestion, hyper-quick query performance, powerful behavioral analytics for next-level insights that other tools miss, and automation that changes the way analysts do their jobs.
Integrations: Expel, Crowdstrike Falcon Fusion, Tines
Category: NDR
ExtraHop is a network detection and response (NDR) platform that provides deep visibility and insights into your network traffic, helping you uncover threats, prevent breaches, and ensure the performance and security of your IT environment.
Integrations: SentinelOne, Crowdstrike Falcon Fusion
Category: Threat Intelligence
Feedly provides AI-powered threat intelligence by aggregating and prioritizing cybersecurity news, vulnerabilities, and threat indicators from trusted sources.
Integrations: Crowdstrike Falcon Fusion
Category: TIP
Flashpoint is a cybersecurity platform developed by Palo Alto Networks. It offers threat intelligence, investigation, and response capabilities, helping organizations identify and mitigate cyber threats.
Integrations: SentinelOne, AbuseIPDB, Google Workspace (formerly GSuite)
Category: Data Security
Forcepoint SMC is a centralized security management console that oversees policy enforcement across Forcepoint cybersecurity products like firewalls and data protection.
Integrations: Crowdstrike Falcon Fusion
Category: SOAR
FortiAnalyzer is a log management, analytics, and reporting platform that provides organizations with a single console to manage, automate, orchestrate, and respond, enabling simplified security operations, proactive identification and remediation of risks, and complete visibility of the entire attack landscape.
Category: Enterprise Wired and Wireless LAN Infrastructure
FortiGate Cloud or FortiCloud is a robust cloud-based management and security analytics platform offered by Fortinet, designed to simplify the provisioning, configuration, and management of your FortiGate NGFWs and downstream devices. It caters to both small and medium-sized businesses (SMBs) and Managed Service Providers (MSPs).
Integrations: SentinelOne, SentinelOne - Purple AI
Category: IT Ops
FortiManager enables centralized management with automation-driven network configuration, visibility, and security policy management.
Integrations: SentinelOne, Crowdstrike Falcon Fusion
Category: Network Firewall
Fortinet's NGFW platform offers a comprehensive suite of security solutions designed to protect organizations against a wide range of threats. It's a cornerstone of Fortinet's Security Fabric, a cybersecurity mesh architecture that integrates multiple security elements to create a collaborative and adaptive defense system.
Integrations: Honeywell (formerly SCADAfence)
Category: SIEM
Fortinet Security Fabric is a comprehensive cybersecurity platform that aims to create a broad and integrated defense system across an organization's entire digital infrastructure. It goes beyond traditional standalone security solutions by weaving together multiple security elements—including firewalls, intrusion prevention systems (IPS), endpoint protection, cloud security, and more—into a cohesive and adaptive fabric.
FortiOS
Category: Enterprise Wired and Wireless LAN Infrastructure
FortiOS ties all the Security Fabric’s security and networking components together to ensure seamless integration. This enables the convergence of networking and security functions to deliver a consistent user experience and resilient security posture across all manner of environments including on-premises, cloud, hybrid, and converging IT/OT/IoT infrastructure.
Category: SIEM
FortiSIEM delivers powerful security information and event management (SIEM) with user and entity behavior analytics (UEBA). It is the backbone of your security operations team, delivering capabilities ranging from automatically building your inventory of assets to applying cutting edge behavioral analytics to rapidly detect and respond to threats.
Integrations: Honeywell (formerly SCADAfence)
Category: SOAR
FortiSOAR helps IT/OT security teams thwart attacks by centralizing incident management and automating the myriad of analyst activities required for effective threat investigation and response. Using FortiSOAR as a central operations hub to standardize and execute these workflows enforces best practices and allows analysts to focus on what matters most to protect the organization.
Integrations: Augur Security
Category: Web Application Firewall
FortiWeb VM is Fortinet’s virtual web application firewall (WAF) protecting web applications from attacks like SQL injection and XSS.
Integrations: Crowdstrike Falcon Fusion
Category: Deception Technology
FortiDeceptor uses decoys and deception techniques to detect lateral movement, insider threats, and advanced attacks.
Integrations: Honeywell (formerly SCADAfence)
FortiNDR
Category: Network Detection & Response (NDR)
FortiNDR provides network detection and response capabilities using AI-driven analytics to identify, investigate, and respond to advanced threats across network environments.
Integrations: Crowdstrike Falcon Fusion
Category: Cloud Storage
Google Drive is a cloud-based file storage and collaboration platform that lets users store, share, and access files from anywhere.
Integrations: JupiterOne
Category: Security Awareness & Phishing Simulation
Gophish provides an open-source phishing simulation platform for security awareness training and measuring user resilience against phishing attacks.
Integrations: Crowdstrike Falcon Fusion
Category: Observability
Grafana enables visualization and monitoring of metrics, logs, and traces across multiple data sources.
Integrations: CrowdStrike Falcon Fusion
Category: SIEM
Graylog provides answers to your team’s security, application, and IT infrastructure questions by enabling you to combine, enrich, correlate, query, and visualize all your log data in one place.
Integrations: Tines
Category: TIP
GreyNoise is a threat intelligence platform that filters out internet background noise, helping security teams focus on real threats.
Integrations: Crowdstrike Falcon Fusion
Category: Threat Intelligence
GreyNoise provides internet-wide threat intelligence by identifying benign scanners and malicious internet activity, helping security teams prioritize actionable threats.
Integrations: Crowdstrike Falcon Fusion
Category: Application Crowdtesting Services
HackerOne is a leading bug bounty platform and vulnerability disclosure platform (VDP) that connects organizations with a global community of ethical hackers, also known as "white hat hackers." It facilitates a secure and collaborative environment for organizations to discover and remediate security vulnerabilities in their software, systems, and infrastructure.
Integrations: Devo
Category: DevOps / CI/CD Platform
Harness is a continuous integration and delivery platform that automates software build, test, and deployment pipelines with a focus on security and reliability.
Integrations: Keeper Security
Hatching
Category: TIP
Hatching identifies and uncovers new or emerging cyber threats and attacks. It involves closely monitoring various sources of threat intelligence, analyzing patterns and behaviors, and proactively detecting potential security risks before they escalate into full-blown incidents.
Integrations: SentinelOne
Category: TIP
Hatching Triage by Hatching is a cloud-based sandboxing and malware analysis platform designed for rapid threat detection and analysis. It enables security teams to quickly and efficiently examine suspicious files and URLs to determine their malicious intent and behavior.
Category: Email Security
Hennge One streamlines identity and access management with secure single sign-on (SSO) and multi-factor authentication (MFA) for seamless and safe user experiences across applications.
Integrations: Cybereason XDR
Category: OT Security, CPS Protection Platform
Honeywell (formerly SCADAfence) secures industrial networks by acting as a cybersecurity guardian protecting against threats and optimizing operations.
Integrations: Fortinet NGFW, Panorama, Splunk, Splunk-OT, Splunk Enterprise Security (ES), IBM QRadar, ServiceNow - Service Graph Connectors (SGC) , ServiceNow Security Incident Response (SIR), Google SecOps (formerly Google Chronicle), FortiSIEM, Forti Deception
Category: EPP
HP Inc. develops personal computers, printers and related supplies, as well as 3D printing services.
Integrations: Splunk, Elastic (formerly ELK)
Category: SIEM
Hunters SOC platform provides unlimited data ingestion, built-in detection engineering, and automated data correlation and investigation to overcome volume, complexity, and false positives.
Integrations: SafeBreach, Expel
Category: SIEM
IBM QRadar is a Security Information and Event Management (SIEM) platform that helps organizations monitor their IT infrastructure for security threats and incidents. It analyzes and correlates data from various sources, including network devices, security appliances, servers, applications, and cloud platforms, providing a unified view of your security posture.
Integrations: Wiz, Cybereason, SafeBreach, Zerofox, Relia Quest, VMware Carbonblack, SentinelOne, Armis, Honeywell, SevenAI, Doppel
Category: SOAR
IBM Security QRadar SOAR with Resilient Orchestration (often referred to simply as IBM SOAR Resilient) is a comprehensive Security Orchestration, Automation, and Response (SOAR) platform designed to empower security teams in streamlining incident response workflows and improving their efficiency.
Integrations: Cybereason, Relia Quest, Augur
Category: Enterprise Asset Management
IBM Maximo manages physical assets, maintenance operations, and IoT data to improve operational efficiency and resilience.
Integrations: Palo Alto Networks - IoT
Category: Threat Intelligence & Incident Response
IBM X-Force provides threat intelligence, incident response, and adversary research to help organizations manage cyber risk.
Integrations: CrowdStrike Falcon Fusion
NetMRI
Category: Network Automation Platform
NetMRI is a network management software product developed by Infoblox that provides comprehensive network change and configuration management (NCCM) capabilities. It empowers network administrators to automate routine tasks, gain deeper insights into their network infrastructure, and proactively address potential issues.
Integrations: Crowdstrike Falcon Fusion
Category: DNS, DHCP & IP Address Management
Infoblox NIOS offers secure, automated DNS, DHCP, and IP address management (DDI) to streamline network operations. It enhances visibility, ensures compliance, and provides robust protection against DNS-based threats.
Integrations: JupiterOne, Palo Alto Networks - IoT
Category: DNS Security
Infoblox DNS delivers secure, scalable, and automated DNS services for enterprises. It prevents DNS-based attacks, enhances reliability, and integrates seamlessly with modern IT infrastructure to improve network performance.
Integrations: Anomali
Category: Developer Tools
iTerm2 is an advanced terminal and SSH client for macOS used by developers and system administrators for command-line access and remote server management.
Integrations: Keeper Security
Category: Endpoint Management & Security
Apple device management and security platform for managing, protecting, and securing Mac, iPhone, and iPad devices.
Integrations: Palo Alto Networks - IoT
Category: DevOps / CI-CD
Jenkins is an open-source automation server used to build, test, and deploy software through continuous integration and continuous delivery (CI/CD) pipelines.
Integrations: Crowdstrike Falcon Fusion
Category: DevOps
JFrog Artifactory is a platform for managing and storing various types of software packages and artifacts. It serves as a central repository for developers and DevOps teams to share and manage code, libraries, and other build components efficiently.
Integrations: JupiterOne
Category: Malware Analysis / Sandbox
A cloud-based platform for malware analysis and threat detection. It provides organizations with tools to analyze suspicious files and URLs for malicious behavior, helping them identify and mitigate potential threats.
Category: Identity & Device Management
JumpCloud centralizes user identities, devices, and access control across cloud and on-prem systems.
Integrations: CrowdStrike Falcon Fusion
Category: CAASM, ITRM
JupiterOne helps organizations gain holistic visibility and control over their entire cyber asset attack surface. It empowers security teams to identify, prioritize, and manage security risks across all IT assets, including devices, cloud resources, code repositories, users, and more.
Integrations: Checkpoint, Armis, CyberArk EPM, Armis, Trend Micro Cloud One, CyberArk Idaptive, Symantec Endpoint, MSAzure, GCP Security Command Center, Oracle Cloud Infrastructure, Kubernetes, ServiceNow, Atlassian Jira Forge (cloud), CrowdStrike, Tenable Vulnerability Management (formerly Tenable.io), SonarQube, Qualys, ZenDesk, Snowflake, Amazon DynamoDB, JFrog - Artifactory, Trend Micro Vision One, Confluent Cloud, AWS Network Firewall, OCI Cloud Guard, Atlassian Jira (on-prem), ServiceNow, Secureworks Taegis XDR, Armis, Infoblox - NIOS, Qualys, NinjaOne, Elasticsearch, Gravity-Zone Bitdefender, IriusRisk, Pulseway, Cyberhaven, StackHawk, oneTrust, Reco AI, Shodan, Puppet, Bloodhound, DataDog, Microsoft Sentinel, ControlUp, Workramp, Druva, 1Password, Horizon, Google Drive, MarkMonitor, Crowdstrike Falcon Fusion
Category: Access Management
Keeper Security is an easy-to-use platform that unifies critical components of Identity and Access Management and enables zero-trust transformation.
Integrations: Snowflake, Tenable Security Center (formerly Tenable.sc), Tenable Vulnerability Management (formerly Tenable.io), Cisco, Ansible, JetBrains, ServiceNow, JetBrains, Puppet, Visual Studio Code Extension, Chef Infra, Jira, Slack App, Terraform, Harness, Salesforce, Microsoft Teams, Royal TS/TSX, iTerm2, Open Claw, Azure Logic Apps, FreshService ITSM, FreshService Workflow, Google Chat, SailPoint Identity Security Cloud, ServiceNow ITSM, ServiceNow Workflow
Category: Secrets Management
Keeper Secrets Manager secures and manages infrastructure secrets, credentials, and access keys.
Integrations: CrowdStrike Falcon Fusion
Category: Incident Response
Kroll Responder provides rapid incident response and digital forensics services to help organizations contain, investigate, and recover from cybersecurity incidents and data breaches.
Integrations: CrowdStrike Falcon Fusion
Category: CNAPP, CSPM
Lacework offers a data driven CNAPP platform that correlates data from across your cloud to keep your environment safe. It automatically makes sense of all your cloud data and uses it to better protect your entire environment — from build time through runtime.
Integrations: Crowdstrike Falcon Fusion
Category: Feature Flag Management
LaunchDarkly enables feature flagging and controlled software releases without redeploying code.
Integrations: CrowdStrike Falcon Fusion
Category: Endpoint Detection & Response (EDR)
LimaCharlie provides cloud-native endpoint detection, response, and security automation capabilities to help organizations build and operate modern security operations.
Integrations: Crowdstrike Falcon Fusion
Category: SIEM, NDR
LogRhythm provides security operations center (SOC) services to our customers build their strongest defense and maximize return on investment.
Integrations: CrowdStrike Falcon Fusion
Category: Threat Detection
Lumu provides continuous compromise assessment by analyzing network metadata to identify, measure, and respond to confirmed cybersecurity compromises across enterprise environments.
Integrations: Crowdstrike Falcon Fusion
Category: Brand protection / Digital risk
MarkMonitor helps organizations protect brands online by detecting fraud, phishing, domain abuse, and counterfeit activity.
Integrations: JupiterOne
Category: Collaboration platform
Mattermost is an open-source, self-hosted messaging platform designed for secure and efficient collaboration within organizations. It offers a robust set of features and capabilities that make it a compelling alternative to proprietary messaging tools like Slack or Microsoft Teams.
Integrations: Tines
Category: SIEM, SOAR
ArcSight is a cybersecurity product that provides big data security analytics and intelligence software for security information and event management (SIEM) and log management.
Integrations: Cybereason CEF Forwarder
Category: Enterprise Information Archiving
Mimecast's platform is a multi-layered cloud-based cybersecurity solution specifically designed to protect organizations from email-borne threats and enhance email security. It acts as a comprehensive shield for your email environment, offering numerous features that work together to safeguard your data, maintain business continuity, and empower efficient email management.
Integrations: SafeBreach, SentinelOne
Category: TIP
MISP is an open-source Threat Intelligence Platform designed specifically to foster collaborative threat intelligence sharing and analysis within trusted communities. It enables organizations to aggregate, store, analyze, and share structured threat intelligence data in a secure and standardized manner, empowering them to proactively defend against evolving cyber threats
Category: Database
MongoDB is a NoSQL database platform that stores data in flexible, JSON-like documents, enabling scalable and high-performance applications.
Integrations: Crowdstrike Falcon Fusion
Category: Vulnerability Intelligence Feed
National Vulnerability Database Feed is a public repository by NIST providing up-to-date information on known software vulnerabilities.
Integrations: Crowdstrike Falcon Fusion
Category: Graph Database
Neo4j is a native graph database designed for highly connected data and relationship analysis.
Integrations: CrowdStrike Falcon Fusion
Category: IPAM
Netbox is an open-source infrastructure resource management tool for documenting networks, data centers, and IP address spaces.
Integrations: Crowdstrike Falcon Fusion, Palo Alto Networks - IoT
Category: Security Service Edge
Netskope Security Cloud Platform stands as a comprehensive cloud-based platform that delivers Secure Access Service Edge (SASE) architecture for organizations. SASE combines security services like cloud access security broker (CASB), zero-trust network access (ZTNA), advanced threat protection (ATP), and data loss prevention (DLP) into a unified platform, simplifying security across cloud, web, and private applications accessed from anywhere, on any device.
Integrations: SentinelOne, Crowdstrike Falcon Fusion, Votiro
Category: Security Service Edge
NetSkope SSE offers cutting-edge cloud security with real-time data protection and threat prevention. It secures web and SaaS usage, enabling a zero-trust architecture for modern enterprises.
Integrations: Cybereason XDR
Category: Data Security / Data Loss Prevention (DLP)
Nightfall AI provides AI-powered data loss prevention (DLP) by detecting and protecting sensitive data across SaaS applications, cloud storage, email, and collaboration platforms.
Integrations: Crowdstrike Falcon Fusion
NinjaOne
Category: Unified IT Management Platform
NinjaOne simplifies IT management with unified monitoring, endpoint management, and automated patching. Its intuitive interface boosts operational efficiency, reduces downtime, and ensures endpoint security.
Integrations: JupiterOne, SentinelOne
Category: Unified IT Management Platform
NinjaOne offers a comprehensive platform that simplifies IT operations, enabling IT teams to monitor, manage, and secure endpoints efficiently through a single, intuitive interface.
Integrations: SentinelOne
Category: Identity & Access Management
Password and access management platform that helps organizations securely store, manage, and share credentials.
Integrations: Crowdstrike Falcon Fusion
Category: Knowledge Management
Notion is a workspace platform for documentation, project tracking, and team collaboration.
Integrations: CrowdStrike Falcon Fusion
Category: OT/IoT Security
Nozomi Networks provides real-time visibility and threat detection for industrial control systems and OT environments.
Integrations: Palo Alto Networks - IoT
Category: Vulnerability & Exposure Management
Nucleus Security provides vulnerability management and exposure prioritization by consolidating findings from multiple security tools into a unified risk management platform.
Integrations: Crowdstrike Falcon Fusion
Category: IT Ops
OAuth is an authorization framework that allows users to grant secure third-party access to their data and accounts, without having to share their passwords. It acts as a middleman between the user, the third-party application (like a login button on a website), and the actual service provider (like Facebook or Google).
Category: Standard
The Open Cybersecurity Schema Framework (OCSF) is a collaborative, open-source effort by AWS and leading partners in the cybersecurity industry. OCSF provides a standard schema for common security events, defines versioning criteria to facilitate schema evolution, and includes a self-governance process for security log producers and consumers. The public source code for OCSF is hosted on GitHub.
Okta
Category: Access Management, OCSF Map
Okta platform manages and secures user identities, granting smooth access to applications while enhancing security through centralized control and strong authentication.
Integrations: Devo, SentinelOne, SevenAI, Torq, Tines
Category: IAM
Okta Workforce Identity is A cloud-based identity and access management (IAM) solution that simplifies employee access to applications and resources, enabling centralized control and secure authentication.
Integrations: SamurAI XDR
Category: Identity Governance & Administration (IGA)
Opal provides identity governance and access management by automating least-privilege access, access reviews, and permission management across cloud applications and infrastructure.
Integrations: Crowdstrike Falcon Fusion
Category: Artificial Intelligence
AI research and technology platform providing generative AI models, APIs, and tools for building intelligent applications.
Integrations: Crowdstrike Falcon Fusion
Category: Vulnerability Management
OpenCVE is a vulnerability tracking platform that monitors and organizes CVE data to help prioritize and manage software vulnerabilities.
Integrations: Crowdstrike Falcon Fusion
OPSWAT MetaDefender uses advanced technologies to protect IT and OT environments from malware, zero-day attacks, and other advanced threats. It integrates seamlessly with existing infrastructure to safeguard data.
Integrations: Cybereason XDR
Oracle
Category: Cloud database, Analytics and business intelligence (ABI) platform, IAM
Oracle Platform encompasses a broad range of cloud-based and on-premises software and infrastructure technologies for enterprise computing.
Integrations: Devo, CrowdStrike, Expel
Category: Analytics and business intelligence (ABI) platform
The Oracle Analytics platform is a cloud native service that provides the capabilities required to address the entire analytics process including data ingestion and modeling, data preparation and enrichment, and visualization and collaboration, without compromising security and governance.
Category: ERP platform
Oracle Cloud Fusion Middleware is a collection of software products enabling integration and communication between different technologies and applications.
Category: IT Ops
Oracle Cloud Logs refer to the records of activities, events, and errors generated within the Oracle Cloud infrastructure and services. These logs provide insights into the performance, security, and operational aspects of Oracle Cloud resources, allowing administrators to monitor, troubleshoot, and optimize their cloud environment effectively.
Integrations: Devo
Category: Cloud Security
Oracle Cloud Infrastructure (OCI) is a cloud computing platform offered by Oracle that provides a wide range of services including compute, storage, networking, databases, and analytics, allowing businesses to build, deploy, and manage applications in the cloud.
Integrations: JupiterOne, Crowdstrike Falcon Fusion
Category: CSPM
Oracle Cloud Guard enhances security for OCI by detecting threats, addressing misconfigurations, and monitoring suspicious activities. It offers comprehensive visibility and easy management of cloud security.
Integrations: JupiterOne
Category: SIEM, SOAR
Panther is a cloud-native security analytics platform that enables threat detection and response by analyzing logs and events at scale.
Integrations: SevenAI
Category: ITSM
Pega Case Management is a low-code platform for IT service management and workflow automation through case and process management.
Integrations: Crowdstrike Falcon Fusion
Category: DRP
PhishLabs provides Digital Risk Protection and anti-phishing threat intelligence to detect and mitigate cyber threats.
Integrations: Crowdstrike Falcon Fusion
Category: Access Management, IoT Security
PingOne is a cloud-based identity and access management (IAM) platform developed by Ping Identity. It provides a comprehensive suite of services for managing user identities, access rights, and authentication across your entire organization, both on-premises and in the cloud.
Integrations: SentinelOne, SpecterOps, Bloodhound
Category: Email Spam Filtering
Postmark is an email delivery service focusing on transactional email with tools like spam filtering and email analytics.
Integrations: Crowdstrike Falcon Fusion
Category: Vulnerability Scanning
ProjectDiscovery Nuclei is an open-source vulnerability scanner using customizable templates for fast security testing.
Integrations: CrowdStrike Falcon Fusion
Category: IT Ops
Prometheus is an open-source systems monitoring and alerting toolkit originally built at SoundCloud. It is now a standalone open source project and maintained independently of any company.
Integrations: Tines
Category: IT Ops
The Prometheus Pushgateway is a component of the Prometheus monitoring system designed to handle metrics from short-lived jobs or batch processes that wouldn't be captured by Prometheus's regular scraping interval.
Integrations: Tines
Category: Monitoring & Observability
Prometheus is an open-source monitoring and alerting toolkit designed for collecting and querying time-series metrics from systems and applications.
Integrations: CrowdStrike Falcon Fusion
Category: Email Security
Proofpoint TAP identifies and blocks advanced email threats, including phishing, ransomware, and weaponized documents. It also mitigates risks in cloud apps with adaptive controls for dangerous URL clicks.
Integrations: SamurAI XDR, SentinelOne - Purple AI
Category: DLP, Email Security, Enterprise Information Archiving, Security Service Edge
Proofpoint's platform is a comprehensive, cloud-based security suite designed to protect organizations from a wide range of cyber threats.
Integrations: SentinelOne
Category: IaC
Puppet is an infrastructure automation tool that manages and configures servers and software consistently across on-premises and cloud environments.
Integrations: JupiterOne, Keeper Security
Category: AST, CNAPP
Qualys is a leading provider of a unified platform for IT security and compliance, delivering end-to-end solutions from a single SaaS interface.
Integrations: Palo Alto Networks - IoT, Palo Alto Networks Cortex XSOAR (formerly Demisto), JupiterOne, SentinelOne, Cybereason XDR, SevenAI, Crowdstrike Falcon Fusion
Category: SIEM, XDR
Rapid7 InsightIDR is a cloud-based security platform designed for Extended Detection and Response (XDR). It provides comprehensive threat detection, investigation, and response capabilities to help organizations swiftly identify and address potential threats across their entire IT environment.
Integrations: SentinelOne, Cybereason XDR, Crowdstrike Falcon Fusion, SevenAI, Palo Alto Networks - IoT
Category: Vulnerability Assessment
Rapid7 InsightVM is a comprehensive vulnerability management platform designed to help organizations identify, prioritize, and remediate vulnerabilities in their IT infrastructure and applications.
Integrations: SentinelOne, Cybereason XDR
Category: MDR
Red Canary delivers cloud-based security services. It allows defenders to win against rapidly evolving adversaries by preparing for, detecting, and responding to security incidents. It exists with the singular purpose to improve security for organizations of all sizes.
Integrations: SentinelOne, CrowdStrike Falcon Fusion
Category: Digital Risk Protection Platform, MDR
ReliaQuest identifies unwanted exposure, protect against external threats, and minimize digital risk. The platform helps to minimize these risks by detecting data loss, securing the online brand, and reducing the attack surface.
Integrations: IBM QRadar, Splunk-Phantom, IBM SOAR (formerly Resilient), MSAzure, JiraDatacenter, ServiceNow, Azure Sentinel, ServiceNow ITSM
Category: TIP
Rockwell FactoryTalk AssetCentre provides you with a centralised tool for securing, managing, versioning, tracking and reporting automation related asset information across your entire facility.
Integrations: Palo Alto Networks - IoT
Category: Endpoint Security / EDR
Royal TS/TSX is a remote connection manager supporting RDP, SSH, and other protocols for centralized access management.
Integrations: Keeper Security
Category: DSPM
Rubrik Security Cloud is a data management platform providing backup, disaster recovery, and ransomware protection with integrated security.
Integrations: Crowdstrike Falcon Fusion
Category: BAS
SafeBreach offers a breach and attack simulation (BAS) platform that enables organizations to proactively test and validate their security controls against real-world attacks.
Integrations: ServiceNow, IBM QRadar, Mimecast, Darktrace, STIX TAXII, Palo Alto Networks - Prisma Cloud, SecureWorks Taegis XDR, Analyst1, Hunters - SIEM Replacement (SOC), ThreatConnect, ThreatQuotient, Trend Micro Vision One, Wiz, Hunters SIEM, CyberArk, AlienVault, Trend Micro Vision One, ThreatQ, Snowflake, Abnormal Security, Google SecOps (formerly Google Chronicle), Guardicore, Threat Connect, Byte Dance - ByteSIEM, Splunk, Microsoft Purview, Zscaler, Google Threat Intelligence, Recorded Future, Wazuh, Tenable Vulnerability Management (formerly Tenable.io), Akeyless PAM, HashiCorp Vault, CrowdStrike Vulnerability Management
Category: Analytics and Business Intelligence (ABI) Platform, Collaboration platform
Salesforce Platform lets you build custom apps, automate workflows, and dig deeper into data to create personalized customer experiences. It's all about empowering businesses to adapt, streamline, and grow, making it a powerful tool for organizations of all sizes.
Integrations: SentinelOne, Devo, Crowdstrike, Keeper Security
Category: Identity Governance & Administration
Saviynt provides identity governance, access certifications, and privileged access management.
Integrations: CrowdStrike Falcon Fusion
Category: Risk Management
SecurityScorecard provides security ratings and continuous monitoring of an organization’s external cybersecurity posture to identify and mitigate risks.
Integrations: CrowdStrike Falcon Fusion
Category: EDR, MDR, EPP, CNAPP, XDR, DSPM
SentinelOne Singularity is an innovative endpoint security platform that goes beyond traditional antivirus by leveraging powerful AI and machine learning to proactively protect your endpoints from sophisticated cyber threats.
Integrations: Amazon Security Lake, WatchTower , SMTP Server, MS Office 365, MS 365 Defender, Salesforce, Microsoft Azure Event Hub, CyberArk EPM, Microsoft Intune, ExtraHop, Microsoft EventHub - Email Defender, AWS S3 Bucket, Cisco Duo, AT&T USM Anywhere, Google Workspace, Orca Security, Red Canary, MalwareBytes, ICAP Interceptor, Microsoft Teams, Mindfeld, Zscaler, Remediant Threat Enrichment, Recorded Future V2, Rapid7 InsightIDR, Rapid7 VM, Orca Security, Palo Alto Networks - Minemeld, Flashpoint, Armis, Armorblox, BeyondTrust, Hatching, Mandiant, Criminal IP, Proofpoint, Microsoft Entra ID (formerly Azure AD), SentinelOne - Attivo, CiscoFTD Parser, FortiGate-FortiManager Parser, Pager Duty, Palo Alto Networks - Cortex XSOAR, IBM QRadar, Okta, Mimecast, Netskope, AWS AppFabric, AWS ELB, AWS CloudWatch, Amazon GuardDuty, Wiz, AWS Security Hub, GCP Security Command Center, SentinelOne - Singularity XDR, Slack, Tenable Vulnerability Management (formerly Tenable.io), Palo Alto Networks - Cortex XDR, CheckPoint Firewall, FortiGate Cloud, Qualys, Amazon Relational Database Service (RDS), Palo Alto Networks - Firewall, Recorded Future, MS Office 365, Splunk, Palo Alto Networks - Dig Security, AWS IAM, VirusTotal, Alien Labs OTX, Vectra, Anomali, Microsoft Defender for Cloud, Darktrace, Cisco Secure Malware Analytics, BigID, Amazon Redshift, SentinelOne App for Splunk,Cyera, OCSF Map Okta, Wiz XSPM, Synk XSPM, Snowflake, Checkpoint (NGFW), Cato Networks,NinjaOne, Legit Security, AWS Redshift (OCSF Map), Microsoft Office 365 (OSCF Map), AWS CloudTrail, AWS Aurora, GCP, Cloudflare, Crowdstrike Falcon Fusion, STIX TAXII
Category: SOAR
Attivo provides network security services. It focuses on providing advanced network security threat detection technology for deployment on premise or as a cloud based service.
Integrations: SentinelOne
Category: Analytics and Business Intelligence (ABI) Platform, Collaboration platform
SentinelOne's "deep visibility" refers to its capability to provide detailed insight into endpoints and networks, allowing organizations to monitor and analyze activity at a granular level. This includes tracking processes, user behavior, file modifications, network connections, and other relevant data to detect and respond to security threats effectively.
Integrations: Devo
Category: CNAPP
This app allows SentinelOne RemoteOps customers to enrich data with relative incident information and to extend mitigation operations.
Integrations: SentinelOne
Category: Cloud Security
SentinelOne Data Lake (SDL) is a scalable and secure solution for centralized data storage and analysis. It enables organizations to aggregate, analyze, and retain security telemetry from diverse sources, delivering actionable insights to enhance threat detection and response. With advanced machine learning and AI capabilities, SDL streamlines investigations and supports compliance requirements.
Integrations: Amzon GuardDuty
Category: Cloud Security
SentinelOne UAM (User Activity Monitoring) is a security solution that provides visibility into user behavior, account activity, and privileged actions to help organizations detect insider threats, suspicious activity, and identity-based attacks across enterprise environments.
Integrations: Amazon GuardDuty
Category: AI
SentinelOne's Purple AI is an AI solution designed to enhance security team efficiency and provide insights into organizational vulnerabilities and transform cybersecurity operations.
Integrations: Slack, MS Office 365, ZScaler, FortiGate Cloud, Palo Alto Networks - Firewall
Category: XDR
Singularity XDR provides unmatched visibility, protection, and response capabilities at cloud scale. It stops threats quickly and accurately, creating actionable insights while reducing security costs.
Integrations: SentinelOne
Category: CNAPP
SentinelOne Singularity is an innovative endpoint security platform that goes beyond traditional antivirus by leveraging powerful AI and machine learning to proactively protect your endpoints from sophisticated cyber threats.
Integrations: SentinelOne App For Splunk, Cyera, OCSF Map Okta, Wiz XSPM, Synk XSPM, Snowflake, Checkpoint (NGFW), Cato Networks,NinjaOne, Legit Security
Category: Identity Threat Detection & Response (ITDR)
SentinelOne Singularity Identity detects and responds to identity-based attacks by monitoring Active Directory and identity infrastructure for suspicious behavior and privilege misuse.
Integrations: Expel
Category: AI
SevenAI collects alert data from multiple sources to identify incidents. It uses AI to gather additional relevant information related to the alerts and, if required, correlates this data with various sources to analyze the root cause of the incidents.
Integrations: SentinelOne, Splunk, Crowdstrike, Jira, AWS CloudTrail, AWS Guardduty, Google Workspace, Okta, Qualys VMDR, ServiceNow, SumoLogic, ElasticSearch, FreshWorks, Devo, Fortinet, IBM QRadar, MS Entra, Panther, MS Defender, Google SecOps, Wiz, Swimlane, Axonius, Cribl, Palo Alto Firewall, Rapid7, Symantec Endpoint Protection (SEP) connector, Torq, URLScan, VirusTotal
Category: E-commerce
Shopify is an e-commerce platform that enables businesses to create online stores, manage sales, process payments, and handle inventory and customer data.
Integrations: CrowdStrike Falcon Fusion
Category: TIP
SilentPush is a threat intelligence platform focused on collecting and analyzing cyber threat data to support proactive security monitoring and response.
Integrations: ServiceNow, Google SecOps
Category: CASB
Skyhigh Security (McAfee Skyhigh) is a Cloud Access Security Broker (CASB) that provides visibility and control over cloud app usage and data security.
Integrations: Crowdstrike Falcon Fusion
Category: Cloud database
Snowflake is a cloud-native data platform that enables organizations to securely store, process, and analyze large volumes of data across multiple environments, supporting data warehousing, data sharing, and advanced analytics at scale.
Integrations: Devo, JupiterOne, Keeper Security, SentinelOne, SafeBreach, CrowdStrike Falcon Fusion, Augur Security
Category: ITSM
SolarWinds is an IT management software suite offering network monitoring, infrastructure management, and performance analytics for enterprise environments.
Integrations: Palo Alto Networks - IoT, CrowdStrike Falcon Fusion
Category: Firewall
SonicWall NSA 3600 delivers advanced firewall protection, including intrusion prevention, malware blocking, and VPN support. It’s designed for mid-sized enterprises seeking secure and high-performance network operations.
Integrations: Cybereason XDR
Category: Attack Path Management
BloodHound is an identity security and attack path analysis platform that maps relationships, privileges, and trust paths within Active Directory and Azure environments to help organizations identify privilege escalation risks, misconfigurations, and potential attack paths used by adversaries.
Integrations: CrowdStrike, Google SecOps (formerly Google Chronicle), ServiceNow, JupiterOne, SpecterOps, Torq, PingOne
Category: Attack Path Security
SpecterOps specializes in advanced adversary simulation, detection engineering, and red team operations. It empowers organizations to enhance cyber defense through tailored security assessments and expert consultancy.
Integrations: Splunk SOAR (Phantom), ServiceNow - Vulnerability Response, Google Secops, Splunk-Bloodhound, Palo Alto Networks XSOAR, Crowdstrike, Crowdstrike NGSIEM, JIRA Forge, Torq, PingOne, Microsoft Sentinel (formerly Azure Sentinel), Elastic Kibana, SilverFort
Category: DevSecOps
Cyberhaven provides advanced data loss prevention (DLP) by tracking how sensitive data moves and is used, enabling real-time detection of insider threats and policy violations.
Integrations: JupiterOne
Category: Threat Intelligence Sharing
STIX/TAXII is a collaborative effort to improve cyber threat information sharing. STIX defines a common language for threat data, and TAXII securely shares it between systems.
Integrations: SafeBreach, SentinelOne, Dynatrace
Category: Privileged Access Management (PAM)
StrongDM provides secure access management by controlling and auditing access to infrastructure, databases, and services without exposing credentials.
Integrations: CrowdStrike Falcon Fusion
Category: Email Security
Sublime Security is a cloud-native email security platform that detects and prevents phishing, business email compromise, and advanced email threats using behavioral and AI-driven detection techniques.
Integrations: Crowdstrike Falcon Fusion
Category: SOAR
Swimlane is a Security Orchestration, Automation, and Response (SOAR) platform that automates security workflows and incident response processes.
Integrations: SevenAI, Crowdstrike Falcon Fusion
Category: Zero Trust Network Access (ZTNA)
Tailscale provides secure, identity-based private networking that enables users and devices to access applications and infrastructure using Zero Trust principles.
Integrations: Crowdstrike Falcon Fusion
Category: Remote Access & Support
TeamViewer provides secure remote connectivity solutions for remote desktop access, IT support, device management, and collaboration across distributed environments.
Integrations: Crowdstrike Falcon Fusion
Category: Vulnerability Assessment
Tenable Security Center focuses primarily on on-premises vulnerability management. It scans traditional IT infrastructure like servers, desktops, and network devices.
Integrations: Palo Alto Networks - IoT, Keeper Security
Category: Vulnerability Assessment
Tenable Vulnerability Management (TVM) empowers you to see and fix vulnerabilities across your digital attack surface, proactively safeguarding your organization from cyber threats.
Integrations: Palo Alto Networks - IoT, SentinelOne, Cybereason XDR, JupiterOne, Keeper Security, SafeBreach
Category: Vulnerability Scanner
Tenable Nessus is a vulnerability scanner that identifies security weaknesses, misconfigurations, and vulnerabilities across IT assets.
Integrations: Crowdstrike Falcon Fusion
Category: IAM
SafeNet (by Thales Group) delivers encryption, key management, and identity access management solutions for data protection.
Integrations: Crowdstrike Falcon Fusion
Category: Deception Technology
Thinkst Canary is a deception platform that deploys low-interaction honeypots and decoys to detect lateral movement, insider threats, and compromised credentials early in the attack lifecycle.
Integrations: CrowdStrike Falcon Fusion
Category: SOAR, TIP
ThreatQuotient is a Threat Intelligence Platform (TIP) designed to unify and streamline threat intelligence operations for organizations of all sizes. It serves as a central hub where security teams can collect, analyze, and operationalize threat data from various sources, empowering them to make informed decisions, prioritize actions, and strengthen their defenses against cyber threats.
Integrations: Devo, SafeBreach, Crowdstrike Falcon Fusion, Doppel
Category: ITSM
TOPdesk is an IT service management platform that helps organizations manage incidents, service requests, asset management, and workflows to improve internal service delivery.
Integrations: CrowdStrike Falcon Fusion
Category: XDR, NDR, EDR, DLP, EPP, CNAPP
Trellix, previously known as FireEye and McAfee, offers a comprehensive cybersecurity platform designed to protect organizations from an ever-evolving threat landscape. It goes beyond traditional siloed solutions by integrating Extended Detection and Response (XDR), endpoint security, network security, cloud security, and other capabilities into a unified platform.
Integrations: Cybereason XDR, Crowdstrike Falcon Fusion
Category: SIEM
Trend Micro offers cybersecurity solutions specializing in threat defense, cloud security, and endpoint protection.
Integrations: Crowdstrike Falcon Fusion
Category: Compliance Automation
Tugboat Logic automates security compliance, risk management, and audit readiness workflows.
Integrations: CrowdStrike Falcon Fusion
Category: Threat analysis
URLScan is a URL analysis tool that inspects website behaviors and reports on suspicious or malicious web content.
Integrations: SevenAI, Crowdstrike Falcon Fusion
Category: NDR, AI
Vectra is a hybrid attack surface visibility and detection platform powered by Artificial Intelligence (AI). It empowers organizations to see and stop sophisticated cyberattacks across their entire infrastructure
Integrations: SentinelOne, Crowdstrike Falcon Fusion
Category: Generative AI Platform
Vega provides an enterprise AI platform for building, deploying, and managing generative AI applications and machine learning workflows.
Integrations: Palo Alto Networks - Cortex XSOAR (formerly Demisto), Google SecOps (formerly Google Chronicle)
Category: TIP
VirusTotal is a free online platform that analyzes suspicious files and URLs for malware, viruses, and other threats. It leverages the power of over 70 antivirus engines and other scanning tools to provide comprehensive threat detection.
Integrations: SentinelOne, SevenAI
Category: IDE
Visual Studio is an integrated development environment (IDE) by Microsoft for building applications across platforms.
Integrations: Keeper Security
Broadcom
Category: EPP, UEM, DLP, EDR
Broadcom encompasses a vast array of hardware, software, and security solutions across various domains, including cyber security, enterprise software, and more.
Integrations: Crowdstrike Falcon Fusion
Category: EDR, EPP, OT Security
VMware Carbon Black is a unified platform offering comprehensive endpoint and workload protection against modern cyber threats. It combines various security capabilities to achieve prevention, detection, and response across physical and virtual environments, from workstations to cloud workloads.
Integrations: Zscaler Sandbox Update V7, IBM QRADAR,Install splunk and go through the s1 apps, Crowdstrike Falcon Fusion
Category: Virtualization & Cloud Infrastructure
VMware vSphere is a virtualization and cloud infrastructure platform that enables organizations to run, manage, and scale virtual machines and data center workloads efficiently.
Integrations: Crowdstrike Falcon Fusion
Category: CNAPP, CSPM
Wiz offers comprehensive cloud security that goes beyond traditional point solutions. It combines prevention, active detection, and response capabilities to safeguard your cloud infrastructure, workloads, and applications across multiple providers like AWS, Azure, GCP, and more.
Integrations: Devo, Splunk, IBM QRadar, Palo Alto Networks - Dig Security, SentinelOne, SafeBreach, SevenAI
Category: LMS
WorkRamp is a learning management system designed for employee training, onboarding, and skills development with analytics and certifications.
Integrations: JupiterOne
Category: Bug Bounty / Vulnerability Disclosure
YesWeHack connects organizations with ethical hackers to identify vulnerabilities through coordinated disclosure and bug bounty programs.
Integrations: CrowdStrike Falcon Fusion
Category: SOAR
ScoutPrime acts as an "outside-in" defense shield for your organization, providing a comprehensive view of your threat landscape beyond your perimeter.
Zerofox
Category: TIP
Zerofox is an always-on, full-spectrum external threat intelligence, protection and response solution that provides organizations with comprehensive visibility and protection across the surface, deep and dark web
Integrations: IBM QRadar
Category: Unified Endpoint Management (UEM)
42Gears provides unified endpoint management and mobile device management solutions that enable organizations to securely manage, monitor, provision, and control enterprise devices across Android, iOS, Windows, macOS, Linux, IoT, and wearable platforms from a centralized console.
Integrations: Devo
Category: TIP
AbuseIPDB is a project dedicated to helping combat the spread of hackers, spammers, and abusive activity on the internet. It offers a central blacklist for webmasters, system administrators, and other interested parties to report and find IP addresses that have been associated with malicious activity online.
Integrations: Flashpoint, Crowdstrike Falcon
Category: Email Security / Anti-Phishing
Agari Phishing Defense protects organizations from email-based threats by detecting phishing, business email compromise (BEC), and brand impersonation using machine learning and behavioral analysis.
Integrations: CrowdStrike Falcon Fusion
Category: Identity & Access Management
Airlock delivers secure authentication, access control, and identity federation for enterprise applications.
Integrations: CrowdStrike Falcon Fusion
Category: Privileged Access Management (PAM)
Akeyless PAM provides privileged access management, secrets management, and just-in-time access to secure privileged accounts and machine identities.
Integrations: SafeBreach
Category: SIEM
Open Threat Exchange (OTX) is a threat data platform that allows security researchers and threat data producers to share research and investigate new threats.
Integrations: SentinelOne
Category: Managed Detection & Response (MDR)
AlphaSOC provides managed detection and response services that help organizations detect, investigate, and respond to cyber threats across enterprise environments.
Integrations: Crowdstrike Falcon Fusion
Category: SOAR
Analyst1's platform uses machine learning and artificial intelligence to analyze data from multiple sources and provide insights into potential threats.
Integrations: SafeBreach
Category: Logging & Monitoring
Anodot uses AI-driven analytics to detect anomalies and performance issues across business and operational metrics.
Integrations: CrowdStrike Falcon Fusion
Category: SIEM, SOAR
The Anomali platform is a cloud-native security operations platform (SOP) designed to improve visibility, threat detection, and response for organizations. It tackles security with a powerful combination of analytics, intelligence, automation, and AI.
Integrations: Amazon GuardDuty, AWS CloudWatch, Cisco Secure Firewall ASA, Cisco Identity Services Engine (ISE), Infoblox - DNS, ZScaler, SentinelOne, Juniper, Crowdstrike Falcon, Doppel
Category: Malware Analysis Sandbox
ANY.RUN is an interactive online malware sandbox that enables security analysts to analyze and investigate suspicious files and URLs.
Integrations: Crowdstrike Falcon Fusion
Category: Application Server
Open-source Java application server and servlet container used to deploy and run Java-based web applications.
Integrations: Crowdstrike Falcon Fusion
Category: Threat Intelligence
APIVoid offers IP, domain, and URL reputation intelligence through APIs for fraud detection and threat analysis.
Integrations: CrowdStrike Falcon Fusion
Category: CNAPP
Aqua Security Platform is a Cloud Native Application Protection Platform (CNAPP) built to safeguard cloud-native applications throughout their entire lifecycle, from code to cloud and back. It's a highly integrated platform that addresses the unique security challenges posed by containerized, serverless, and cloud-based applications.
Integrations: Tines
Category: IoT Platform
Arduino provides an open-source hardware and software platform for developing, connecting, and managing IoT devices and embedded systems.
Integrations: Crowdstrike Falcon Fusion
Category: Network Detection & Response (NDR)
Arkime provides full-packet capture, indexing, and network traffic analysis to help security teams investigate and respond to network threats.
Integrations: Crowdstrike Falcon Fusion
Category: IoT Security, OT Security, MDSS, CPS Protection Platform, ITRM
Armis Centrix, the cyber exposure management platform, is powered by its AI-driven Asset Intelligence Engine, which sees, secures, protects and manages billions of assets around the world in real time.
Integrations: Flashpoint, Crowdstrike Falcon
Category: Enterprise Wired and Wireless LAN Infrastructure
Aruba Central is a cloud-based networking solution that empowers IT with AI-powered insights, intuitive visualizations, workflow automation, and edge-to-cloud security to manage campus, branch, remote, data center, and IoT networks from one dashboard.
Integrations: Palo Alto Networks - IoT, Palo Alto Networks - Cortex XSOAR (formerly Demisto)
Category: NAC, Enterprise Wired and Wireless LAN Infrastructure
Aruba Networking ClearPass for Zero Trust Security helps to authenticate, authorize, and enforce secure network access control with role-based network policies based on Zero Trust Security.
Integrations: Crowdstrike Falcon Fusion
Category: EPP
By combining insurance with security into InsurSec, At-Bay brings the incentives, scale, and expertise needed to bridge the SMB (Server Message Block) cyber security gap.
Integrations: GSuite, CrowdStrike Zero Trust
Category: TIP
AT&T Alien Labs is the threat intelligence unit of AT&T Cybersecurity that delivers tactical threat intelligence that powers resilient threat detection and response — even as your IT systems evolve and adversaries change their tactics, techniques, and procedures (TTPs).
Category: SIEM, Cloud Security
USM Anywhere centralizes security monitoring of networks and devices in the cloud, on premises, and in remote locations, helping you to detect threats virtually anywhere.
Integrations: SentinelOne
Category: IT Ops
Atlassian JIRA (on-prem) is a project management and issue tracking software deployed and managed within your own IT infrastructure.
Integrations: JupiterOne
Category: IT Ops
Atlassian Forge (Cloud) is a platform for developers to build and deploy add-ons and apps for both Jira and Confluence. It provides developers with the tools and infrastructure needed to create, host, and distribute their applications to users in the Atlassian ecosystem.
Integrations: JupiterOne, Keeper Security, SpecterOps
Category: IT Ops
Jira Service Management (JSM) is a comprehensive service desk and IT service management (ITSM) solution built on top of the popular Atlassian Jira platform. It's designed to help organizations streamline their service delivery processes, improve customer satisfaction, and meet ITSM best practices.
Integrations: Jira, Crowdstrike
Opsgenie
Category: ITSM
Opsgenie is an incident response orchestration tool that aggregates alerts, manages on-call schedules, and coordinates response teams.
Integrations: Crowdstrike Falcon Fusion
Category: Work Management
Trello is a visual collaboration and work management tool that uses boards, lists, and cards to help teams organize tasks, track progress, and manage projects efficiently.
Integrations: CrowdStrike Falcon Fusion
Category: Breach and Attack Simulation (BAS)
AttackIQ is a cybersecurity platform designed to help organizations simulate and measure their ability to withstand cyberattacks. It blends a range of technologies and approaches, such as Purple Teaming, Threat Library, etc., to create a comprehensive security validation solution.
Integrations: CrowdStrike Falcon Fusion
Category: TIP
Augur is an attack surface management platform that helps organizations discover and monitor their exposed assets and vulnerabilities.
Integrations: MS- Defender, Cortex XSIAM, Google SecOps (formerly Google Chronicle), IBM SOAR (formerly Resilient), CrowdStrike Falcon Fusion, Databricks, Snowflake, FortiSOAR
Category: Access Management
Auth0 identity platform helps to add sophisticated authentication and authorization to your applications. It allows you to centralize and manage users from multiple identity providers and give them branded, seamless signup and login experiences.
Category: Unified Endpoint Management (UEM)
Automox is a cloud-native patching platform that automates patch management across Windows, macOS, Linux, and third-party software. It aims to simplify and enhance security by removing the burden of manual patching processes.
Integrations: Devo
Category: AI & Machine Learning
AWS platform for building, training, deploying, and managing machine learning models at scale
Integrations: Crowdstrike Falcon Fusion
Category: CSAM
Axonious is a cybersecurity asset management platform that discovers, monitors, and secures devices and users connected to the network.
Integrations: CrowdStrike Falcon Fusion, SevenAI
Category: DevOps
Azure DevOps is Microsoft’s DevOps platform that provides source control, CI/CD pipelines, agile project management, artifact management, and testing tools for software development teams.
Integrations: Crowdstrike Falcon Fusion
Category: Human Resources Management System (HRMS)
BambooHR is an HR software platform that helps organizations manage employee data, recruitment, onboarding, and performance.
Integrations: Crowdstrike Falcon Fusion
Category: OT Security, Access Management
BeyondTrust is a comprehensive privileged access management (PAM) platform that helps organizations protect their most sensitive assets by securing, managing, and auditing privileged accounts and access.
Integrations: SentinelOne
Category: DSPM
BigID enhances data privacy and protection through advanced data discovery, classification, and compliance automation, helping organizations manage sensitive data effectively.
Integrations: SentinelOne
Category: Digital Forensics & Incident Response
Automated DFIR platform that helps security teams collect forensic evidence, investigate incidents, and respond to threats.
Integrations: Crowdstrike Falcon Fusion
Category: Security Rating
Bitsight is a cybersecurity ratings platform that assesses and monitors the security posture of organizations and their vendors.
Integrations: Crowdstrike Falcon Fusion
Category: IPAM
Bluecat IPAM (IP Address Management) is a comprehensive software platform designed to help organizations manage and optimize their IP address space. It offers a wide range of features and benefits, making it a valuable tool for businesses of all sizes.
Integrations: Palo Alto Networks - IoT
Category: IT Service Management (ITSM)
BMC Remedy is an ITSM platform for incident, change, and service request management.
Integrations: CrowdStrike Falcon Fusion
Category: Collaboration platform
Box is a cloud-based content management and collaboration platform that prioritizes security to protect sensitive data and ensure compliance.
Integrations: Votiro
Category: Zero Trust Network Access (ZTNA)
Luminate Secure Access Cloud provides secure, zero-trust access to applications by enabling identity-based access controls, reducing reliance on VPNs, and protecting enterprise resources across hybrid environments.
Integrations: Cybereason XDR
Category: SASE
Cato Networks offers a comprehensive Secure Access Service Edge (SASE) platform that converges SD-WAN and cloud-native security services, enabling secure and optimized application access for users across all locations globally
Integrations: SentinelOne
Category: IT Infrastructure Monitoring
IT monitoring and observability platform providing visibility across cloud, on-premises, network, and application environments.
Integrations: Crowdstrike Falcon Fusion
Category: Extended Detection & Response (XDR)
Unifies security events and supports threat detection, investigation, and automated response across connected security tools.
Integrations: Crowdstrike Falcon Fusion
Category: Cloud Security
Provides security across cloud environments to help reduce exposure and protect against cloud threats.
Integrations: Crowdstrike Falcon Fusion
Category: OT Security, HEC
Check Point provides comprehensive cybersecurity solutions that protect organizations from attacks across networks, endpoints, cloud, mobile, and IoT devices. It offers a wide range of products and services that address various aspects of cybersecurity.
Integrations: Crowdstrike Falcon Fusion
Category: OT Security
Check Point SandBlast is a comprehensive suite of security solutions designed to protect organizations against advanced threats, zero-day attacks, and targeted malware. It offers multiple layers of protection, including network, endpoint, and cloud-based defenses.
Category: Firewall
CheckPoint’s Quantum Firewalls offer advanced network security with features like remote access VPN, SASE, and SD-WAN, defending against IoT, DDoS, and Zero Day attacks.
Integrations: SentinelOne
Category: Next-Generation Firewall (NGFW)
Check Point's Quantum Security Gateways provide comprehensive, AI-powered threat prevention and unified security management to protect enterprise networks, data centers, and cloud environments against advanced cyber threats
Integrations: SentinelOne
Category: ADM
Citrix ADM provides centralized monitoring, analytics, and management of application delivery infrastructure, including syslog collection for enhanced visibility and troubleshooting.
Integrations: Crowdstrike Falcon Fusion
Category: Communications Platform
ClickSend provides cloud-based SMS, voice, email, and messaging services that enable organizations to automate customer and operational communications.
Integrations: Crowdstrike Falcon Fusion
Category: File Conversion & Processing
Converts files between formats and provides APIs for automating file import, conversion, and export workflows.
Integrations: Crowdstrike Falcon Fusion
Category: Email Security, Cloud infrastructure and platform services (CIPS) [Strategic Cloud Platform Services]
Cloudflare is a cloud-based web performance and security tool, which helps firms in the public and private sectors with protection and speed acceleration of websites applications and other internet services against hackers.
Integrations: Crowdstrike Falcon Fusion, SentinelOne, Expel
Category: Backup & Recovery
Commvault provides enterprise backup, recovery, and data protection across cloud and on-prem environments.
Integrations: CrowdStrike Falcon Fusion
Category: Identity Governance & Administration (IGA)
ConductorOne provides identity governance by automating access reviews, provisioning, and lifecycle management across enterprise applications.
Integrations: Crowdstrike Falcon Fusion
Category: Data Streaming
Confluent Cloud is a fully managed data streaming platform built on Apache Kafka. It provides a cloud-native solution for organizations to process and analyze large volumes of data in real-time.
Integrations: JupiterOne
Category: Digital Employee Experience
ControlUp is an IT operations platform designed for monitoring, troubleshooting, and optimizing digital workspaces and cloud environments.
Integrations: JupiterOne
Category: Observability / Log Analytics
Coralogix delivers real-time log analytics and observability for cloud-native environments.
Integrations: CrowdStrike Falcon Fusion
Category: NSM
Corelight is a network detection and response solution that converts network traffic into actionable security data using Zeek-based sensors.
Integrations: Splunk SOAR (Phantom), ServiceNow, Google Secops, Splunk-Bloodhound, MS Sentinel, Palo Alto Networks XSOAR, Crowdstrike, Crowdstrike NGSIEM, JIRA Forge, Torq, PingOne
Category: Event Stream Processing
Cribl is a data observability and processing platform that empowers organizations to control, optimize, and secure their observability data at scale. It helps make observability data more usable, cost-effective, and secure for security analytics, IT operations, and DevOps teams.
Integrations: Tines
Category: TIP
Criminal IP is a Cyber Threat Intelligence (CTI) search engine that scans the internet for open ports and devices to discover and track potentially malicious IP addresses and domains. It aims to provide insights into potential threats and vulnerabilities, helping individuals and organizations make informed security decisions.
Integrations: SentinelOne, Tines
Category: EPP
Crowdstrike Falcon Endpoint is a cloud-based endpoint protection platform (EPP) that safeguards your devices against a wide range of cyber threats. It combines innovative prevention, detection, and response capabilities to protect endpoints like laptops, desktops, servers, and mobile devices from malware, ransomware, phishing attacks, zero-day exploits, and advanced threats.
Integrations: Devo
Category: SIEM
CrowdStrike NG SIEM is a cloud-native next-generation security information and event management platform that provides centralized log management, threat detection, security analytics, and automated investigation capabilities using AI and real-time telemetry from across enterprise environments.
Integrations: SpecterOps, Flare
Category: TIP
Crowdstrike Falcon Intel is a comprehensive threat intelligence platform that goes beyond just data collection. It offers actionable insights and proactive threat hunting capabilities to empower security teams in preventing and mitigating cyberattacks.
Integrations: Dynatrace
Category: SOAR Connectors
CrowdStrike Falcon Fusion is a native SOAR framework that streamlines security operations with automated workflows. It empowers teams to respond faster, reduce manual effort, and stop threats more effectively.
Integrations: Abnormal Security, Armis, Azure Web Application Firewall, Cisco IOS, Cisco ISE, Cisco ESA, Cisco ASA, CloudFlare Zero Trust, CloudFlare One, Extra Hop SaaS, Forcepoint SMC, Ivanti MDM, Ivanti EPM, Ivanti ITSM, Opsgenie, Palo Alto Network CNN, Rapid7 InsightIDR, Recorded Future, Sailpoint Identity Security Cloud, Sailpoint IdentityIQ, ThreatQuotient, Vectra NDR, Cisco Secure Endpoint, Cisco Malware Analytics, CloudFlare Email Security, FortiManager, Gmail, Menlo Security Secure Web Gateway, Microsoft Defender for Endpoint, Microsoft Defender for Office365, Microsoft Intune, NetSkope, Netbox, Oracle Cloud, Oracle IAM, Palo Alto Network NGFW, PAN Prisma Cloud, Palo Alto Network Strata, Proofpoint, OpenCVE, Rootly, Rubrik Security Cloud, SecurityTrails, Slack, Azure GuardDuty, Azure IAM, AWS Lambda, AWS Network Firewall, AWS Secrets Manager, Absolute, Anomali, AbuseIPDB, CheckPoint, Dropbox, FireEye, Forcepoint, Github, HPE Aruba, HashCorp Vault, Hibob, Mandiant, Qualys, Tenable, VMWare Workspace, Wazuh, Trellix,ADP, ANY.RUN,Axonious,Bitsight,Censys, Citrix ADM Syslog, Datadog, Gitlab GreyNoise,HaveIbeenPwned, Microsoft Defender for Cloud Apps, Microsoft Share Point,Feed,OpenText, Salesforce, Phishlabs, Trend Micro Cloud App Security, Postmark Spamcheck, Devo, Discord, LaserWork, PureStorage, WHOIS, RSA NetWitness, Checkmarx SAST, DomainTools Iris, Jira, National Vulnerability Database Feed, IP API, Thales SafeNet Trusted Access, Palo Alto Network Enterprise IoT, Zoom, Corelight Zeek, Forescout, Pega Case Management, Fortinet FortiWeb, Barracuda, Checkphish, Skyhigh, AWS ACM, AWS Access Analyzer, AWS Athena, AWS Config, AWS Organizations, AWS SNS, AWS Security Lake, AWS WAF, AWS CloudWatch Logs, AWS Cloudtrail, Zscaler, YesWeHack, ThreatConnect, Sophos Endpoint Security, SolarWinds, Snowflake, Seraphic Security, IBM XForce, Palo Alto Networks - Cortex XSOAR, Infoblox, Augur, Thinkst Canary, SafeBase, LogRhythm, Kroll, Kaspersky, Terraform, Illumio Core, CybelAngel, Cisco ThousandEyes, BitDefender, AttackIQ, Atlassian Trello, Agari, Acronis, AWS Cognito, AWS DynamoDB, AWS Firewall Manager, AWS Shield, Airlock Identity Access Suite, Anodot, BigPanda, BMC Remedy, Commvault, Coralogix, CyberArk, Elastic Defend, Elastic Security, Grafana Labs, JFrog, JumpCloud, Keeper Secrets Manager, LaunchDarkly, Microsoft Entra ID (formerly Azure AD), Neo4j, MS Office 365, SentinelOne, Sumo Logic, Symantec, Tugboat Logic, Veracode, 1Password, APIVoid, Cisco Vulnerability Management, Dynatrace Application Monitoring, Elastic Search, Exabeam, HYAS Insight, HYAS Protect, HubSpot, Notion, Microsoft Defender for Identity, ProjectDiscovery Nuclei, Saviynt Enterprise Identity Cloud, TOPdesk, StrongDM, Shopify, Security Scorecard, Prometheus, OpenText UCMDB, MongoDB, LogicMonitor, Fortinet Forti NDR, Cymulate, BambooHR, CircleCI, Egnyte, IBM Cloud, Jenkins, JetBrains, VMware by Broadcom - Carbon Black, Red Canary, Hatching Triage, TeamViewer, VMware vSphere, AlgoSec, Azure DevOps, DarkTrace, Harmonic Security, JupiterOne, Microsoft PowerBI, Orca Security, Sublime Security, SwimLane, ThetaLake, Bonusly, Brex, Cerby, Cybersixgill, Cydarm, GreyNoise, Intezer Analyze, Koodous, LimaCharlie, Logsign, Lumu, Nucleus, Nightfall AI, Opal Security, Tenchi Security, Vanta, AlphaSOC, Arduino, Arkime, ClickSend, ConductorOne, Dragos Worldview, EmailHippo, Endgame, Feedly, Fleet Device Management, Gophish, VisionHeight, Tailscale, Workday, OpenAI, Nord Pass, Centreon, Binalyze, Barracuda, Apache Tomcat, AWS Sagemaker, Check Point XDR, Cloud Convert, Check Point Cloud Security (formerly CloudGuard), Palo Alto Networks - Xpanse, Doppel, Druva, FullHunt
Category: Zero Trust Security
CrowdStrike Zero Trust secures any device, user, or workload by continuously verifying access and stopping breaches in real-time across your cloud and on-premise network.
Integrations: At-Bay
Category: SCS, MDR, EDR, EPP
Cybereason is a unified security platform that goes beyond traditional endpoint protection and detection by offering automated breach prevention, advanced detection, and comprehensive response capabilities.
Category: IT Ops
A Cybereason CEF (Common Event Format) forwarder is a tool or module designed to forward security event data in the Common Event Format to a centralized logging or security information and event management (SIEM) system for analysis and correlation. This helps organizations to monitor and respond to security incidents effectively by aggregating and analyzing data from various sources within their IT environment.
Integrations: Arcsight, Cybereason
Category: XDR
Cybereason XDR predicts, understands, and ends cyber attacks by fusing varied telemetry sources into visual attack stories: MalOps (malicious operations).
Integrations: JupiterOne, Luminate Secure Access Cloud, TrendMicro, Entra UD, Microsoft Defender for Endpoints, Trellix
Category: EDR
Cybereason EDR is an endpoint detection and response (EDR) solution designed to protect organizations from advanced cyber threats. It leverages advanced analytics, artificial intelligence, and machine learning to provide comprehensive visibility and real-time response capabilities
Integrations: Google SecOps (formerly Google Chronicle), Cybereason
Category: Incident Response & Crisis Management
Cydarm provides cyber incident response and crisis management, helping security teams coordinate investigations, response workflows, and operational resilience.
Integrations: Crowdstrike Falcon Fusion
Category: CPS Protection Platform
Cylera provides a platform for IoT security and intelligence, aiming to improve data richness, security strength, and response times for organizations. This can help protect critical assets, including people, data, privacy, and business continuity.
Integrations: IBM QRadar
Category: Breach & Attack Simulation (BAS)
Cymulate is a security validation platform that simulates real-world cyberattacks to assess and improve an organization’s security posture.
Integrations: Crowdstrike Falcon Fusion
Category: Data Analytics / AI Platform
Databricks provides a unified data analytics platform combining data engineering, analytics, and machine learning on a lakehouse architecture.
Integrations: Augur Security
Category: SIEM, SOAR
Devo platform enables security and operations teams to address common use cases including centralized logging, SIEM, compliance, fraud detection, and more. The platform includes tightly integrated applications for security and IT teams.
Integrations: ServiceNow App, MalwareBytes, Cylance Protect, Wiz, Automox, Microsoft Defender, MS 365 Defender Incident, Oracle Cloud Logs, ThreatStack, JumpCloud, HackerOne, SureMDM, Snowflake, GitHub, CrowdStrike, Alienvault, Veeam, Salesforce, MS Office 365, MS 365 Defender, MSDefender for Cloud Apps, Tanium, SureMDM, CrowdStrike Falcon Endpoint, Threat Quotient, Okta, TAXII, MalwareBytes Nebula, Microsoft Defender for Endpoint, Slack, Palo Alto Networks - Cortex XSOAR, SevenAI, CrowdStrike Falcon Fusion
Category: Application platform, Container management
Docker provides a suite of development tools, services, trusted content, and automations, used individually or together, to accelerate the delivery of secure applications.
Integrations: Tines
Category: Threat Intelligence Platform
DomainTools offers domain and DNS threat intelligence solutions for cybersecurity investigations and threat hunting.
Integrations: Crowdstrike Falcon Fusion
Category: Threat Intelligence
Dragos WorldView provides operational technology (OT) threat intelligence, delivering actionable intelligence on industrial cyber threats and adversary activity.
Integrations: Crowdstrike Falcon Fusion
Category: CDPP
Druva is a cloud-native data protection platform providing backup, disaster recovery, and compliance across endpoints and cloud workloads.
Integrations: JupiterOne, Crowdstrike Falcon Fusion
Category: Data Governance
Egnyte is a secure cloud-based content collaboration and file sharing platform that provides governance, compliance, and data protection capabilities for enterprises.
Integrations: Crowdstrike Falcon Fusion
Category: Endpoint Security / EDR
Elastic Defend provides endpoint threat prevention and detection powered by the Elastic Stack.
Integrations: CrowdStrike Falcon Fusion
Category: Endpoint Security / EDR
Elastic Search is a distributed search and analytics engine used for log analysis, observability, and security analytics.
Integrations: CrowdStrike Falcon Fusion
Category: SIEM / XDR
Elastic Security provides SIEM and endpoint protection capabilities built on the Elastic Stack for threat detection and response.
Integrations: Doppel, CrowdStrike Falcon Fusion
Category: Endpoint Detection & Response (EDR)
Endgame provides endpoint detection and response capabilities to identify, investigate, and remediate advanced threats across enterprise endpoints.
Integrations: Crowdstrike Falcon Fusion
Category: MDR
Expel offers managed security services with real-time threat monitoring, detection, and response, providing businesses with proactive cybersecurity without the overhead of in-house teams.
Integrations: Google SecOps, Exabeam, Palo Alto Networks - Cortex XSOAR, Hunters Security, Sublime, Imperva Waf, Cortex XSIAM, Microsoft Defender for Identity Integration, Microsoft Defender for Office 365, Augur Security, Oracle Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, Cloudflare, Cisco, AWS CloudTrail, Azure Event Hub, Workday, AWS Security Hub, Sumo Logic, Trend Micro Vision One, Sentinel One Singularity Identity, Amazon Security Lake
Category: CNAPP
ThreatStack is a Cloud Security Platform (CSP) designed to protect cloud-native applications and infrastructure from cyber threats. It provides comprehensive visibility, threat detection, and response capabilities across multi-cloud environments, including AWS, Azure, and Google Cloud.
Category: Threat Exposure Management
Flare is a cyber threat intelligence and threat exposure management platform that helps organizations monitor external attack surfaces, detect leaked credentials, identify threat actor activity, and reduce cyber risk across the dark web and open web.
Integrations: Splunk, Crowdstrike NG SIEM, Google SecOps (formerly Google Chronicle)
Category: Unified Endpoint Management (UEM)
Fleet provides open-source device management for macOS, Windows, and Linux, enabling organizations to manage endpoint security, compliance, and inventory.
Integrations: Crowdstrike Falcon Fusion
Category: Network Security
Forescout is a powerful network security and asset management platform designed to discover, classify, manage, and secure all connected devices within your organization's network, including IT, IoT, IoMT, and OT assets. It helps you stay ahead of evolving cyber threats and maintain compliance with security regulations.
Integrations: ServiceNow App, MalwareBytes, Cylance Protect, Wiz, Automox, Microsoft Defender, Oracle Cloud Logs, ThreatStack, JumpCloud, HackerOne, SureMDM, Snowflake, Тахii, GitHub, CrowdStrike Falcon Fusion, Alienvault, Veeam, Salesforce, MS Office 365, MS 365 Defender, MS Defender for Cloud-Apps, Tanium, SureMDM, Crowdstrike Falcon Endpoint, Threat Quotient, Okta, TAXII, Nebula, Microsoft Defender for Endpoint, Microsoft Defender For Cloud Apps, Slack, XSOAR, SentinelOne - Deep Visibility
Category: ITSM
FreshService is a cloud-based IT Service Management platform that simplifies incident, asset, and change management with an intuitive interface.
Integrations: SevenAI, Keeper Security
Category: Workflow
FreshService is a cloud-based IT Service Management platform that simplifies incident, asset, and change management with an intuitive interface.
Integrations: Keeper Security
Category: External Attack Surface Management (EASM)
Discovers internet-facing assets and monitors exposures, vulnerabilities, and changes in an organization’s external attack surface.
Integrations: Crowdstrike Falcon Fusion
GitHub
Category: Enterprise Agile Planning, Application security testing (AST)
GitHub is a powerful online platform for software development and project management that has become the central hub for millions of developers and organizations around the globe. It offers a suite of features designed to streamline collaboration, version control, and code management.
Integrations: Devo, Cybereason XDR
GitLab
Category: Enterprise Agile Planning, Application security testing (AST)
GitLab is a comprehensive open-source DevOps platform that provides a full suite of tools for software development, project management, and operations. It aims to streamline the entire software development lifecycle, from planning and coding to testing, deployment, and monitoring.
Integrations: Tines, Crowdstrike Falcon Fusion
Category: DevOps
GitLab is a DevOps platform that provides source code management, CI/CD pipelines, security scanning, and collaboration tools for software development teams.
Integrations: Dynatrace
Category: Cloud infrastructure and platform services (CIPS) [Strategic Cloud Platform Services]
Google Cloud Security Command Center (SCC) is a centralized security and risk management platform for Google Cloud Platform (GCP). It provides comprehensive visibility into your GCP resources, helps you identify and prioritize security risks, and enables you to take action to mitigate those risks.
Integrations: JupiterOne, Cybereason XDR, Palo Alto Networks - Dig Security, SentinelOne
Category: Cloud Database
BigQuery is a powerful, serverless, and highly scalable cloud-based data warehouse offered by Google Cloud Platform (GCP). It allows organizations to analyze massive datasets and extract insights in a fast and efficient manner.
Category: SIEM, SOAR
Google Security Operations is a cloud service designed for enterprises to privately retain, analyze, and search the large amounts of security and network telemetry they generate.
Integrations: BloodHound, Doppel, Cybereason EDR, Honeywell (formerly SCADAfence), Cybereason, SafeBreach, SpecterOps, SevenAI, Augur, SilentPush, Flare, Vega
Category: Public Cloud Storage Service
Google Cloud Storage (GCS) is a highly scalable and reliable object storage service offered by Google Cloud Platform (GCP). It allows you to store any type of data, from small files to massive datasets, in a secure and durable manner. GCS delivers exceptional performance, flexibility, and cost-effectiveness, making it ideal for a wide range of use cases.
Integrations: Tines
Category: Collaboration Platform
Google Workspace is a cloud-based suite of productivity and collaboration tools designed to help individuals, teams, and organizations work together more effectively. It offers a variety of integrated applications that can be accessed from anywhere with an internet connection, making it ideal for remote and hybrid work environments.
Integrations: SentinelOne, Cybereason XDR, SevenAI, Palo Alto Networks - IoT
Category: SIEM, SCS, SOAR, MDR, EDR
The Mandiant platform, known as Mandiant Advantage, is a multi-vendor XDR (Extended Detection and Response) platform and cybersecurity intelligence product combined. It's designed to help organizations of all sizes detect, investigate, and respond to sophisticated cyber threats more effectively.
Integrations: SentinelOne, Crowdstrike Falcon Fusion
Category: Cloud Security
GCP VPC Flow Logs are logs that record all network traffic entering and leaving Google Cloud Platform (GCP) Virtual Private Clouds (VPCs), providing detailed information about network activity and potential security concerns.
Integrations: SentinelOne
Category: Cloud Security
GCP Audit Logs are logs that record system events and user actions within GCP resources, offering a comprehensive audit trail for security analysis and compliance purposes.
Integrations: SentinelOne
Gmail
Category: Email Service Platform
Gmail is a cloud-based email service by Google that offers communication, storage, and productivity features for individuals and organizations.
Integrations: Crowdstrike Falcon Fusion, Torq
Category: Communication platform
Google Chat is a communication and collaboration platform for teams, integrated with Google Workspace for messaging and collaboration.
Integrations: Crowdstrike Falcon Fusion, Keeper Security
Category: Threat Intelligence
Google Threat Intelligence delivers threat data and insights derived from Google’s global telemetry to support proactive defense.
Integrations: SafeBreach
Category: Data Security
Harmonic Security helps organizations secure sensitive enterprise data across generative AI applications by providing visibility, governance, and data loss prevention controls for AI usage.
Integrations: Crowdstrike Falcon Fusion
Category: Secrets Management
HashiCorp Vault provides centralized secrets management, encryption, and privileged credential protection for applications, infrastructure, and cloud environments.
Integrations: SafeBreach
Category: Malware Analysis
Hatching Triage is a malware sandbox and automated malware analysis platform that helps security teams detect, analyze, and investigate malicious files and behavior.
Integrations: Crowdstrike Falcon Fusion
Category: Searchable Breach Database
HaveIbeenPwned is a breach notification service that allows users to check if their credentials have been exposed in known data breaches.
Integrations: Crowdstrike Falcon Fusion
Category: HRMS
Hibob is an HR management platform designed for recruitment, onboarding, and employee engagement in modern workplaces.
Integrations: Crowdstrike Falcon Fusion
Category: Vulnerability assessment
NodeZero autonomously simulates real-world cyberattacks to uncover and prioritize exploitable vulnerabilities, enabling organizations to proactively strengthen their security posture.
Integrations: JupiterOne
Category: Customer Relationship Management (CRM)
HubSpot is a cloud-based CRM platform for marketing, sales, and customer service automation.
Integrations: CrowdStrike Falcon Fusion
Category: Threat Intelligence
HYAS Insight provides adversary infrastructure intelligence to enhance investigations and attribution.
Integrations: CrowdStrike Falcon Fusion
Category: Protective DNS
HYAS Protect blocks malicious domains using predictive threat intelligence.
Integrations: CrowdStrike Falcon Fusion
Category: Cloud Computing
IBM Cloud is an enterprise cloud computing platform that provides infrastructure, platform, AI, security, and hybrid cloud services for businesses and developers.
Integrations: Crowdstrike Falcon Fusion, Tines
Category: Zero Trust Segmentation
Illumio Core enforces Zero Trust segmentation by controlling east-west traffic between workloads, reducing lateral movement and limiting the impact of breaches.
Integrations: CrowdStrike Falcon Fusion
Category: Firewall
Imperva WAF secures web applications by detecting and blocking cyber threats, including DDoS attacks, SQL injection, and cross-site scripting. It provides real-time visibility and adaptive protection to safeguard critical web assets.
Integrations: Cybereason XDR
Category: IPAM
InfoBlox IPAM is a platform that manages and automates IP address allocation, DNS, and DHCP services, providing clear network infrastructure visibility and control.
Integrations: Palo Alto Networks - IoT
Category: Malware Analysis & Threat Detection
Intezer Analyze provides malware analysis and threat detection by identifying code reuse and malware families, helping analysts accelerate incident investigations.
Integrations: Crowdstrike Falcon Fusion
Category: Threat Modelling
IriusRisk is a threat modeling and security design platform that helps organizations identify, manage, and mitigate security risks early in the software development lifecycle.
Integrations: JupiterOne
Category: UEM
Ivanti MDM is a mobile device management solution that secures and manages enterprise mobile devices from a single console.
Integrations: Crowdstrike Falcon Fusion
Category: ITSM
Ivanti Neurons is an AI-driven IT automation and endpoint management platform that improves security posture and operational efficiency.
Integrations: Crowdstrike Falcon Fusion
Category: IDE
JetBrains develops intelligent software development tools, including popular IDEs like IntelliJ IDEA and PyCharm.
Integrations: Keeper Security, CrowdStrike Falcon Fusion
Category: DevOps
JFrog Artifactory manages binary artifacts across the software development lifecycle.
Integrations: CrowdStrike Falcon Fusion
Category: Identity & Access Management (IAM)
JumpCloud’s open directory platform makes it possible to unify your technology stack across identity, access, and device management, in a cost-effective manner that doesn’t sacrifice security or functionality.
Integrations: Devo
Category: Firewall
Juniper SRX Series firewalls provide next-generation security with intrusion prevention, application visibility, and unified threat management. They deliver high-performance protection for enterprises of all sizes.
Integrations: Cybereason XDR, Anomali
Category: Endpoint Protection / EDR
Kaspersky provides endpoint protection and advanced threat detection using signature-based, behavioral, and AI-driven technologies to prevent malware, ransomware, and advanced persistent threats across enterprise environments.
Integrations: CrowdStrike Falcon Fusion
Category: Cloud Security Protection Platform (CSPP)
Kivera is a cloud-based platform designed to inspect and monitor APIs for security vulnerabilities and potential threats. It provides comprehensive visibility into your API environment, helping organizations secure their APIs and prevent unauthorized access, data breaches, and other security incidents.
Category: Malware Analysis
Koodous provides Android malware analysis and mobile threat intelligence through a collaborative platform for identifying malicious applications and mobile threats.
Integrations: Crowdstrike Falcon Fusion
Category: Container Orchestration
Kubernetes, also known as K8s, is an open source system for automating deployment, scaling, and management of containerized applications. It simplifies managing complex applications in a cloud-native environment.
Integrations: JupiterOne
Category: Endpoint Monitoring
LanScope streamlines endpoint management with robust monitoring, compliance enforcement, and advanced security controls. It ensures data protection and operational efficiency across devices.
Integrations: Cybereason XDR
Category: ASPM
Legit Security offers an AI-native ASPM platform that automates the discovery, prioritization, and remediation of application security issues, providing unified visibility and control across the software development lifecycle.
Integrations: SentinelOne
Category: Observability
LogicMonitor is a cloud-based monitoring platform that provides visibility into infrastructure, networks, and applications with automated alerts and analytics.
Integrations: Crowdstrike Falcon Fusion
Category: SIEM
Logsign provides SIEM, UEBA, and SOAR capabilities to help organizations detect, investigate, and respond to cybersecurity threats across their environments.
Integrations: Crowdstrike Falcon Fusion
Category: EDR, MDR, EPP
Malwarebytes Business Platform is an all-in-one cybersecurity solution for businesses, protecting against a wide range of threats on endpoints, networks, and identities.
Integrations: Devo, SentinelOne, Tines
Category: SIEM, TIP, EDR, XDR, NDR
A cloud-hosted security platform that maximizes limited resources, powering ThreatDown Endpoint Protection, EDR, and MDR solutions.
Integrations: Devo
Category: SWG
Menlo Security Secure Web Gateway is a cloud-based web security solution that isolates browsing sessions to protect users from web-based threats.
Integrations: Crowdstrike Falcon Fusion
Category: Public Cloud Storage Service
Azure Blob Storage is Microsoft's object storage solution for the cloud. It's designed to store massive amounts of unstructured data in a highly scalable and cost-effective way.
Integrations: Tines
Category: CIPS
Microsoft Azure Event Hub is a fully managed, real-time data ingestion service that can collect massive amounts of data from various sources and process them in a scalable and reliable manner. It's designed for high-volume and high-throughput scenarios, making it ideal for handling streams of data from devices, sensors, websites, applications, and more.
Integrations: SentinelOne, Expel
Category: Security Service Edge
Defender for Cloud Apps is a Cloud Access Security Broker (CASB) from Microsoft, protecting your organization against cloud app risks and threats. It acts as a gatekeeper, monitoring and controlling data flow between your users and cloud apps.
Integrations: Devo, SentinelOne, Crowdstrike Falcon Fusion
Category: EDR, EPP
Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats.
Integrations: Devo, Cybereason XDR, Crowdstrike Falcon Fusion, Expel
Category: Insider Risk Management Solutions
Microsoft Defender for Identity is a cloud-based security solution that helps organizations detect, investigate, and respond to identity-based threats by monitoring user activities and behaviors across on-premises and hybrid environments.
Integrations: Expel, Crowdstrike Falcon Fusion
Category: Access Management
With Microsoft Entra ID (formerly called Azure AD), you can safeguard your organization with a cloud identity and access management solution that connects employees, customers, and partners to their apps, devices, and data.
Integrations: SentinelOne, Palo Alto Networks - IoT, Palo Alto Networks - Cortex XSOAR (formerly Demisto), Keeper Security, SevenAI, Corelight, Cybereason XDR, Crowdstrike Falcon Fusion, Torq
Category: Email Security
Microsoft Event Hub - Email Defenses" refers to a feature or service provided by Microsoft within its ecosystem, likely aimed at enhancing email security. This could involve analyzing email traffic, detecting and mitigating threats such as phishing attempts, malware, or spam, and providing insights or alerts to administrators for proactive defense measures.
Integrations: SentinelOne
Category: Unified Endpoint Management (UEM)
Microsoft Intune is a cloud-based endpoint management solution that enables organizations to manage, secure, and configure devices used by their employees, including mobile devices, laptops, desktops, and virtual machines.
Integrations: SentinelOne, Crowdstrike
Category: Analytics and business intelligence (ABI) platform
Microsoft Power BI is a business intelligence (BI) platform that allows you to connect to, visualize, analyze, and share data to gain meaningful insights and make data-driven decisions. It offers a suite of tools and features designed to make data exploration and comprehension accessible for both technical and non-technical users.
Integrations: Crowdstrike Falcon Fusion
Category: IT Ops
Microsoft SCCM stands for System Center Configuration Manager. It's a comprehensive management solution used by IT professionals to deploy, manage, and update devices and applications within an organization's network. SCCM enables centralized control over software distribution, patch management, operating system deployment, and inventory tracking across a wide range of devices, including desktops, laptops, servers, and mobile devices.
Integrations: Palo Alto Networks - IoT, Palo Alto Networks - Cortex XSOAR (formerly Demisto)
Category: SIEM, SOAR
Formerly known as Azure Sentinel, Microsoft Sentinel is a cloud-native security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution that empowers organizations to collect, analyze, and respond to security threats across their entire IT environment.
Integrations: Relia Quest, SamurAI XDR, Doppel, Cybereason XDR, JupiterOne, Expel, Palo Alto Networks - IoT, SpecterOps
Category: Collaboration Platform
Microsoft Teams is a cloud-based collaboration platform that goes beyond simple messaging. It acts as a central hub for teams and organizations to communicate, collaborate, and manage projects efficiently.
Integrations: SentinelOne, Votiro, Keeper Security
Category: SIEM, EDR, NDR, XDR
Microsoft 365 Defender stands as a comprehensive cloud-based security platform within the Microsoft 365 ecosystem, designed to safeguard your organization from advanced cybersecurity threats across various attack vectors.
Integrations: SentinelOne, Devo, Expel
Category: Collaboration platform
MS Office 365, often referred to as simply Office 365, is a comprehensive, cloud-based suite of productivity applications and services designed to empower individuals and organizations to create, collaborate, and communicate more effectively.
Integrations: SentinelOne (OCSF), Devo, SentinelOne - Purple AI, SamurAI XDR, Crowdstrike Falcon Fusion
MSAzure
Category: Cloud infrastructure and platform services (CIPS) [Strategic Cloud Platform Services]
Microsoft Azure, often simply referred to as Azure, is a comprehensive, public cloud computing platform that offers a wide range of services and resources to help organizations build, deploy, and manage applications and services over the internet. It provides a flexible, scalable, and cost-effective platform for a vast array of IT needs, from simple web hosting to complex enterprise solutions.
Integrations: Votiro, Relia Quest, JupiterOne
Category: XDR
Microsoft Defender XDR is an Extended Detection and Response (XDR) platform from Microsoft that offers comprehensive threat detection, investigation, and response capabilities across endpoints, cloud workloads, and identities.
Integrations: Palo Alto Networks - IoT, Dynatrace
Category: Content Management
Microsoft SharePoint is a collaboration and content management platform used for building intranet sites, managing documents, and enabling teamwork.
Integrations: Crowdstrike Falcon Fusion
Category: Data compliance platform
Microsoft Purview is a unified data governance and compliance platform that helps organizations discover, classify, and protect sensitive data across their environment.
Integrations: SafeBreach
Category: Email & Collaboration
Cloud-based email and calendar platform for managing communications, contacts, meetings, and schedules.
Integrations: Torq
Category: IAM
OneTrust is a comprehensive privacy, security, and data governance platform that helps organizations manage regulatory compliance, consent, and risk across their digital
Integrations: JupiterOne
Category: AI Security Operations
Open Claw is an AI-driven cybersecurity platform focused on automating security investigations, threat analysis, and operational workflows for security teams.
Integrations: Keeper Security
Category: TIP
OpenCTI is an open-source cyber threat intelligence platform that aggregates, structures, and shares threat data for security teams.
Integrations: Doppel
Category: ITSM
OpenText SMAX is an AI-powered IT Service Management platform that automates service desk processes, asset management, and workflow automation.
Integrations: Crowdstrike Falcon Fusion
Category: ITSM
OpenText SMAX is an AI-powered IT Service Management platform that automates service desk processes, asset management, and workflow automation.
Integrations: Crowdstrike Falcon Fusion
Category: CNAPP, CSPM
Orca Security Platform is a cloud-native vulnerability management and security platform that stands out through its agentless and context-aware approach.
Integrations: SentinelOne, Tines, CrowdStrike Falcon Fusion
Category: IT Ops
PagerDuty is a real-time operations platform that empowers teams to manage incidents, prevent disruptions, and ensure seamless digital experiences.
Integrations: SentinelOne
Category: TIP
MineMeld is an open-source threat intelligence platform (TIP) that streamlines the aggregation, processing, and sharing of threat intelligence data across your security infrastructure. Developed by Palo Alto Networks, it empowers organizations to gather, analyze, and leverage threat intelligence from various sources to proactively defend against cyber threats.
Integrations: SentinelOne
Category: SIEM
Aruba Central, AIMS, Anomali, Armis, Cisco WLC, Forescout, Microsoft SCCM, Palo Alto Networks - Prisma Cloud, Tanium, Tenable Vulnerability Management (formerly Tenable.io), Tenable Security Center (formerly Tenable.sc), Rapid7, Aruba, CrowdStrike, Qualys, Bluecat IPAM, ServiceNow, Net MRI, Microsoft Entra ID, Cisco Meraki, Rockwell AssetCentre, Microsoft Defender XDR, Palo Alto Networks - Cortex XSOAR (formerly Demisto), ServiceNow - Service Graph Connectors,
Integrations: Augur Security, Expel
Category: SOAR
Cortex XSOAR is a comprehensive security orchestration, automation, and response (SOAR) platform developed by Palo Alto Networks. It empowers security teams to streamline incident response, automate repetitive tasks, and strengthen their overall security posture.
Integrations: Microsoft SCCM, SpecterOps, CrowdStrike Falcon Fusion, Vega
Category: Data Security Posture Management (DSPM)
Dig Security (or Palo Alto Networks - Dig Security) is a cloud-native data security platform that addresses the challenges of protecting sensitive data in today's complex, multi-cloud environments. It goes beyond traditional data security tools by combining Data Security Posture Management (DSPM), Data Loss Prevention (DLP), and Data Detection and Response (DDR) capabilities into a unified platform.
Integrations: Jira, PagerDuty, ServiceNow, Wiz, Palo Alto Networks - Cortex XSOAR (formerly Demisto), Slack, MS Azure, GCP Security Command Center, SentinelOne
Category: IoT Security, MDSS
Palo Alto Networks IoT Security is a comprehensive solution designed to protect and manage Internet of Things (IoT) devices within your network. Here's a breakdown of its key features and value proposition:
Integrations: Aruba Central, AIMS, Anomali, Armis, Cisco WLC, Forescout, Microsoft SCCM, Palo Alto Networks - Prisma Cloud, Tanium, Tenable Vulnerability Management (formerly Tenable.io), Tenable Security Center (formerly Tenable.sc), Rapid7, Aruba, CrowdStrike Falcon, Qualys, Bluecat IPAM, ServiceNow, Net MRI, Microsoft Entra ID, Cisco Meraki, Rockwell AssetCentre, Microsoft Defender XDR, Palo Alto Networks - Cortex XSOAR (formerly Demisto), ServiceNow - Service Graph Connectors, Infoblox IPAM, JAMF 2.0, Solarwinds, Solarwinds Orion, IBM Maximo, NetBox, Microsoft Sentinel (formerly Azure Sentinel), Nozomi Networks, Trend Micro Vision One, ServiceNow - Vulnerability Response, BMC Helix, Workspace One UEM, Siemens Industrial Asset Hub, Infoblox - NIOS, JamF Education, Google Workspace (formerly GSuite)
Category: IT Ops
Palo Alto Networks Panorama is a centralized management platform that allows you to configure, monitor, and update Palo Alto Networks firewalls from a single interface.
Integrations: Honeywell (formerly SCADAfence)
Strata Cloud Manager is a cloud-delivered security management platform from Palo Alto Networks that provides centralized visibility, policy management, analytics, and operational control for firewalls and network security services across hybrid and multi-cloud environments.
Integrations: Crowdstrike
Category: CNAPP, CSPM, Security Service
Palo Alto Networks Prisma is a cloud-delivered security platform offering comprehensive protection across various areas of your IT infrastructure and applications. It encompasses several distinct yet integrated services, working together to provide a holistic security posture.
Integrations: Palo Alto Networks - IoT, SafeBreach, Crowdstrike Falcon Fusion
Category: Security Service Edge
Palo Alto Prisma Access Parser refers to a set of tools and functionalities within the Palo Alto Prisma Access platform used to process and analyze logs and data generated by user and device activity when navigating through the secure access gateway.
Integrations: SentinelOne
Category: XDR
Xpanse is an active attack surface management solution that helps your organization actively discover, learn about and respond to unknown risks in all connected systems and exposed services.
Integrations: IBM QRadar, CrowdStrike Falcon Fusion
Category: IoT Security
Zingbox IoT is a PAN IoT platform that protects healthcare networks by identifying, classifying, and securing Internet of Medical Things (IoMT) devices.
Category: XDR
Cortex XDR delivers comprehensive threat protection by analyzing enterprise-wide data. It enhances SOC efficiency, improves visibility, and reduces security operation costs by consolidating tools and leveraging AI.
Integrations: SentinelOne, Dynatrace
Category: Firewall
Palo Alto Networks Next-Generation Firewall provides comprehensive protection against cyber threats with features like deep packet inspection, intrusion prevention, and advanced threat intelligence. It enables secure application usage and zero-trust network security across hybrid and multi-cloud environments.
Integrations: SentinelOne, SentinelOne - Purple AI, SevenAI
Category: Secure Access Service Edge
Prisma SASE is a cloud-delivered Secure Access Service Edge platform that combines networking and security to enable secure remote access and threat prevention.
Integrations: ServiceNow
Category: IT Ops
Pulseway is a remote monitoring and management (RMM) platform designed to help IT professionals manage, monitor, and automate IT operations from anywhere. It provides real-time monitoring, patch management, automation, and remote control capabilities.
Integrations: JupiterOne
Category: Enterprise Storage Infrastructure
PureStorage provides enterprise-grade all-flash data storage solutions optimized for high performance and reliability.
Integrations: Crowdstrike Falcon Fusion
Category: OT Security
Radiflow provides a comprehensive industrial cybersecurity platform designed to protect critical infrastructure and industrial control systems (ICS) from cyberattacks.
Integrations: Splunk, ServiceNow - Vulnerability Response, ServiceNow - Service Graph Connectors
Category: SSPM, AI
Reco AI offers an AI-powered SaaS Security platform focused on data exposure and insider risk. It automatically discovers and maps user access to sensitive data across SaaS applications, prioritizes high-risk behavior, and enables rapid response to insider threats—providing unified visibility and control over SaaS data usage and user activity.
Integrations: JupiterOne
Category: TIP
Recorded Future is an independent threat intelligence cloud platform that enables organizations to identify and mitigate threats across cyber, supply-chain, physical and fraud domains; and are trusted to get real-time, unbiased and actionable intelligence.
Integrations: SentinelOne, Crowdstrike Falcon Fusion, SafeBreach, Dynatrace
Category: Access Management
Reftab is a cloud-based fixed asset management platform designed to simplify and streamline the way organizations track and manage their physical assets, like laptops, tools, furniture, and even supplies.
Integrations: Tines
Category: TIP
Remediant's Threat Enrichment Platform (TEP) is now a part of Netwrix. It empowers security teams to transform raw threat data into actionable insights.
Integrations: SentinelOne
Category: IRM
Rootly is an incident management platform that automates alerting, communication, and post-incident reviews to accelerate resolution.
Integrations: Crowdstrike Falcon Fusion
Category: SIEM
RSA Security specializes in risk management and cybersecurity solutions including SIEM, authentication, and fraud prevention.
Integrations: Crowdstrike Falcon Fusion
Category: Vendor Risk Management
SafeBase is a trust center platform that helps organizations centralize security, compliance, and privacy information to streamline security reviews and accelerate sales cycles.
Integrations: CrowdStrike Falcon Fusion
Category: IAM
SailPoint Identity Security Cloud / IdentityIQ are identity governance platforms that provide access management, compliance, and identity lifecycle automation for enterprises.
Integrations: Crowdstrike Falcon Fusion, Keeper Security
Category: XDR, AI
SamurAI XDR is a cloud-based security platform categorized as Extended Detection and Response (XDR). It's designed to help organizations identify and respond to cyber threats.
Integrations: 1Password, Okta Workforce Identity, Cisco Meraki, Microsoft Sentinel (formerly Azure Sentinel), Trend Micro Apex One, Amazon GuardDuty, MS Office 365, Proofpoint - TAP
Category: XDR
Secureworks Taegis XDR offers detection, response and an open platform built from the ground up to integrate market-leading technologies.
Integrations: SafeBreach, JupiterOne
Category: TIP
SecurityTrails is a threat intelligence platform that offers comprehensive DNS, IP, and domain data to map and analyze attack surfaces.
Integrations: Crowdstrike Falcon Fusion
Category: Browser Security
Seraphic Security protects against browser-based threats by monitoring and securing web sessions across managed and unmanaged devices.
Integrations: CrowdStrike Falcon Fusion
Category: IT Ops, Vulnerability Assessment, SOAR, Enterprise Agile Planning, ITSM, Ticketing
ServiceNow is an all-encompassing ecosystem for workflow automation and digital transformation. The ServiceNow platform easily integrates with other tools, letting users manage projects, teams and customer interactions using a variety of apps and plugins.
Integrations: SafeBreach, Relia Quest, JupiterOne, SpecterOps, SevenAI, Silent Push, Prisma SASE, Doppel, Keeper Security
Category: IT Ops
The Service Graph Connectors from ServiceNow are powerful tools that bridge the data gap between your CMDB (Configuration Management Database) and various IT tools and platforms.
Integrations: Honeywell (formerly SCADAfence), Radiflow, Palo Alto Networks - IoT
Category: Vulnerability Management
ServiceNow's Vulnerability Response is a feature that helps organizations manage and respond to cybersecurity vulnerabilities efficiently. It enables teams to identify, prioritize, and remediate vulnerabilities across their IT infrastructure by centralizing vulnerability data, automating workflows, and facilitating collaboration between security and IT teams.
Integrations: Radiflow, SpecterOps, Palo Alto Networks - IoT
Category: Cloud database
ServiceNow CMDB a central repository where you catalog and visualize all your IT assets, their relationships, and their configurations.
Integrations: JupiterOne, Radiflow, Palo Alto Networks - IoT, Honeywell, SpecterOps, Keeper Security
Category: ITSM
ServiceNow ITSM is your IT service maestro, harmonizing incidents, requests, and changes into a seamless symphony. It streamlines operations, reduces downtime, and keeps users happy, making your IT service delivery sing like a professional orchestra.
Integrations: Cybereason, SafeBreach, Relia Quest, Keeper Security
Category: Threat Intel
ServiceNow Threat Intelligence delivers real-time threat data and automated response workflows to proactively detect, assess, and mitigate cyber threats across your organization.
Integrations: Silent Push
Category: IT Ops
ServiceNow SecOps unites people, processes, and technology to protect your organization against evolving threats and respond swiftly to attacks.
Integrations: Cybereason XDR
Category: SOAR
ServiceNow SIR is a platform that streamlines security incident response. It helps teams collaborate, automate tasks, and track incidents for faster threat resolution.
Integrations: Honeywell (formerly SCADAfence), SpecterOps, Silent Push, Keeper Security, Augur
Category: Workflow Automation
Automates business processes through workflows that connect tasks, approvals, applications, and systems.
Integrations: Keeper Security
Category: Search Engine
Shodan is a search engine for internet-connected devices that scans and indexes exposed systems, services, and ports. It helps security teams identify publicly accessible assets, vulnerabilities, and misconfigurations.
Integrations: JupiterOne
Category: Industrial Asset Management / Asset Performance Management (APM)
Siemens Industrial Asset Hub provides centralized asset management and monitoring for industrial equipment, enabling organizations to improve asset visibility, optimize maintenance, and enhance operational reliability across manufacturing and industrial environments.
Integrations: Palo Alto Networks - IoT
Category: User Authentication
Silverfort shields sensitive data across any endpoint, cloud, or container, wrapping everything in invincible encryption while granting seamless access for authorized users, making data breaches a distant memory.
Integrations: SpecterOps
Category: Collaboration platform
Slack swaps emails for streamlined chats and channels, fueling teamwork with instant messaging, file sharing, and integrations, making collaboration a breeze in the digital age.
Integrations: Palo Alto Networks - Dig Security, SentinelOne, Crowdstrike Falcon, Keeper Security
Category: XSPM
Synk XPSM is a platform designed to enhance security by providing real-time threat detection, vulnerability management, and compliance automation throughout the development lifecycle.
Integrations: SentinelOne
Category: Application Security Testing (AST)
SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code. It integrates into your existing workflow and detects issues in your code to help you perform continuous code inspections of your projects.
Integrations: JupiterOne
Category: Endpoint & Network Security (XDR)
Sophos provides endpoint, network, email, and cloud security through its Sophos Central platform, using AI-driven threat detection, XDR, and synchronized security to prevent, detect, and respond to cyber threats.
Integrations: CrowdStrike Falcon Fusion
Category: SIEM
Splunk, in both cloud and on-prem versions, devours your IT data deluge, transforming it into actionable insights like a digital alchemist. Its cloud offerings, swift and scalable, empower real-time analysis. On-prem options grant granular control, ideal for sensitive data or compliance needs. Whether in the cloud or on your own turf, Splunk illuminates your IT operations, guiding decisions and optimizing performance.
Integrations: Cybereason
Category: SIEM
Splunk Enterprise Security (ES) is your cybersecurity command center, transforming raw data into actionable intelligence to shield your organization from threats and ensure digital resilience.
Integrations: Cybereason, Honeywell (formerly SCADAfence), Wiz, SafeBreach, Flare
Category: SIEM
Splunk OnCall is your digital first responder for incident management, transforming frantic scrambling into calm, coordinated action.
Integrations: Tines
Category: IT Ops
Splunk IAI (Industrial Asset Intelligence) specifically tackles the challenge of unleashing the power of Operational Technology (OT) data within the broader Splunk platform. Imagine it as a translator and interpreter for your industrial sensors and machines, extracting valuable insights from their raw data to optimize and safeguard your industrial operations.
Category: SOAR
Splunk SOAR (formerly Phantom) is a security orchestration, automation, and response (SOAR) solution. The Splunk Phantom platform combines security infrastructure orchestration, playbook automation, and case management capabilities to integrate your team, processes, and tools to help you orchestrate security workflows, automate repetitive security tasks, and quickly respond to threats.
Integrations: SpecterOps, ReliaQuest
Category: SIEM, SOAR
Sumo Logic is a cloud-native Continuous Intelligence Platform that helps organizations manage and gain insights from their log and machine data.
Integrations: Votiro, Doppel, SevenAI, Crowdstrike Falcon Fusion, Expel
Category: Enterprise Security
Symantec is a cybersecurity company offering endpoint protection, data loss prevention, and threat intelligence solutions for enterprise security.
Integrations: Cybereason XDR, CrowdStrike Falcon Fusion
Tanium
Category: EDR, Unified Endpoint Management (UEM), Vulnerability Assessment
Tanium enables you to answer fundamental questions about your endpoint environment and break down silos between IT operations and security.
Integrations: Palo Alto Networks - IoT, Palo Alto Networks Cortex XSOAR (formerly Demisto), Devo
Category: Endpoint Management (XEM)
Tanium Core is a cybersecurity platform designed to provide real-time visibility and control over endpoints within an organization's network. It offers features such as asset discovery, endpoint management, threat detection, and incident response, allowing organizations to rapidly identify and remediate security issues across their IT infrastructure.
Integrations: Tines
Category: IT Ops
Tanium Threat Response is a feature within the Tanium cybersecurity platform that enables organizations to swiftly detect, investigate, and respond to security threats across their IT infrastructure. It provides real-time visibility into endpoint activities, facilitates rapid threat detection, and supports quick incident response actions to mitigate potential risks effectively.
Integrations: Tines
Category: SaaS Security Posture Management (SSPM)
Tenchi Security provides SaaS security posture management by continuously monitoring SaaS environments for misconfigurations, security risks, and compliance issues.
Integrations: Crowdstrike Falcon Fusion
Category: Infrastructure as Code
Terraform enables infrastructure provisioning and management using declarative configuration files across cloud and on-prem environments.
Integrations: Keeper Security, CrowdStrike Falcon Fusion
Category: Compliance & Collaboration Security
ThetaLake provides compliance, risk management, and security monitoring for unified communication and collaboration platforms such as Zoom, Microsoft Teams, and Webex.
Integrations: Crowdstrike Falcon Fusion
Category: TIP
ThreatConnect offers robust threat intelligence feeds and data services to manage, operationalize, and consolidate intelligence from multiple sources, including open-source, commercial, and internal data.
Integrations: SafeBreach, CrowdStrike Falcon Fusion, Doppel
Category: SOAR
Tines is a no-code automation platform specifically designed for security teams. It empowers them to easily build custom workflows (called Stories) using "actions" and "events" to automate repetitive tasks, streamline incident response, and strengthen their overall security posture.
Integrations: Jira, Cloudshark, IBM Cloud, Google Security Command Centre Alerts(Story Library), Okta, , CarbonBlack, Cisco Secure Endpoints, Reftab, JupiterOne-Exabeam, Google Workspace, Venafi, Google, Cloud Storage, Azure Sentinel, JIRA-ServiceDesk Wazuh, Azure Blob, GitLab, Prometheus, GrayLog, Analyst One, Splunk OnCall, JupiterOne-DarkTrace, Aqua Security, Cribl, Criminal IP, Docker, Cisco Umbrella, Cisco Secure EMail, MalwareBytes, Orca Security, MatterMost, Tanium - Threat Response, Tanium - Core, Doppel
Category: SOAR
Torq is a SOAR platform that automates security workflows and incident responses.
Integrations: SevenAI, SpecterOps, Okta, Microsoft Entra ID, Bloodhound, Gmail, Microsoft Outlook
Category: CNAPP, CSPM
Trend Micro Cloud One is a cloud-based security platform offering comprehensive protection for endpoints and workloads across hybrid cloud environments. It provides features like endpoint security, threat detection and response, compliance management, and data loss prevention, all managed through a centralized console.
Integrations: JupiterOne
Category: EPP
Trend Micro Apex One protection offers advanced automated threat detection and response against high level threats. Apex One provides actionable insights, expanded investigative capabilities, and centralized visibility.
Integrations: SamurAI XDR, Crowdstrike Falcon Fusion
Category: XDR
Trend Vision One supports diverse hybrid IT environments, automates and orchestrates workflows, and delivers expert cybersecurity services, so you can simplify and converge your security operations.
Integrations: JupiterOne, Safebreach, Expel, Palo Alto Networks - IoT
Category: Compliance & Collaboration Security
Vanta provides automated security compliance and continuous monitoring to help organizations achieve and maintain frameworks such as SOC 2, ISO 27001, HIPAA, and GDPR.
Integrations: Crowdstrike Falcon Fusion
Category: Enterprise Backup and Recovery Software Solution, ITRO (IT Resilience Orchestration)
Veeam is a unified data protection and recovery platform designed to help organizations safeguard critical business data across both physical and virtual environments. It goes beyond traditional backup and recovery by providing enhanced security, visibility, and automation for managing your data across hybrid and multi-cloud ecosystems.
Integrations: Devo
Category: Application Security
Veracode provides static, dynamic, and software composition analysis to identify application vulnerabilities.
Integrations: CrowdStrike Falcon Fusion
Category: Identity & Access Management (IAM)
VisionHeight provides identity governance and privileged access visibility, helping organizations manage user access, entitlements, and compliance.
Integrations: Crowdstrike Falcon Fusion
Category: TIP
VMRay is a solution for advanced malware analysis and threat detection. It uses innovative technologies to help organizations deeply understand sophisticated cyber threats and effectively protect their systems from targeted attacks.
Integrations: Cybereason
Category: Email Security
Votiro is a content security platform that protects organizations from zero-day malware, ransomware, and other advanced threats embedded within files. It employs a unique Positive Selection technology that focuses on extracting only the safe elements of a file, leaving behind any malicious components.
Integrations: Box, Sumo Logic, MSAzure, SMTP Connector, ICAP-Connector, Microsoft Teams, ZScaler, Netskope, Microsoft Sentinel, Salesforce, MS Teams Connector
Category: SIEM, EDR
Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments.
Integrations: Crowdstrike Falcon Fusion, SafeBreach
Category: Threat Intelligence
WHOIS is a domain registration lookup protocol providing publicly accessible domain ownership and registration details.
Integrations: Crowdstrike Falcon Fusion
Category: Enterprise HR Platform
Workday delivers cloud-based human capital management, finance, and planning solutions for large enterprises.
Integrations: Expel, CrowdStrike Falcon Fusion
Category: Unified Endpoint Management (UEM)
Workspace ONE UEM provides unified endpoint management, enabling organizations to securely manage Windows, macOS, Linux, iOS, and Android devices from a single platform.
Integrations: Palo Alto Networks - IoT
Category: Collaboration Platform
Zendesk is a cloud-based customer service platform designed to help businesses manage and improve their interactions with customers. It offers a suite of tools to handle customer inquiries, complaints, and requests efficiently.
Integrations: JupiterOne
Category: Collaboration platform
Zoom empowers seamless interaction through its unified suite of video conferencing, messaging, phone, and collaboration tools, boosting productivity and team engagement.
Integrations: CrowdStrike Falcon Fusion
Category: Security Service Edge, OT Security, CSPM, DLP, CNAPP
Zscaler transforms network security with a cloud-delivered platform that eliminates traditional perimeters and enables secure access to apps and data from any device, anytime, anywhere.
Integrations: SentinelOne, Votiro, SentinelOne - Purple AI, Anomali, SafeBreach, CrowdStrike Falcon Fusion
