Integrations

Connect the stack you already run.

CyForte reads from and acts through the tools already in your environment. Here is who we talk to.

Microsoft
SIEM
Cloud, identity and security platform spanning Azure, Microsoft 365, Entra ID, Sentinel and Defender.
CrowdStrike
EDR & XDR
Cloud-native endpoint and workload protection built around the Falcon agent.
Palo Alto Networks
SOAR
Network security and automation, from next-generation firewalls to the Cortex product family.
Splunk
SIEM
Machine-data search and analytics, widely deployed as a security data lake and SIEM.
Okta
Identity & Access
Identity and access management for workforce sign-in, covering single sign-on and MFA.
ServiceNow
CMDB
Enterprise workflow platform covering IT service management and the configuration management database.
Atlassian
Ticketing & ITSM
Team software: Jira for issue tracking and Confluence for documentation.
Amazon Web Services
Cloud
Amazon's cloud platform, with CloudTrail, CloudWatch and S3 as its audit and logging backbone.
Google Cloud
Cloud
Google's cloud platform, covering compute, storage and audit logging across projects.
Proofpoint
Email Security
Email security and threat protection, built on a large body of email-borne threat intelligence.
Qualys
Vulnerability Mgmt
Cloud-based vulnerability management, asset discovery and compliance scanning.
Tenable
Vulnerability Mgmt
Vulnerability management built on the Nessus scanning engine.
Rapid7
SIEM
Detection, response and vulnerability management across the Insight product family.
SentinelOne
EDR & XDR
Autonomous endpoint protection with behavioural detection and response.
Netskope
Network & Firewall
Cloud access security and secure web gateway for SaaS and web traffic.
Zscaler
Network & Firewall
Cloud-delivered secure web gateway and zero-trust network access.
KnowBe4
Awareness
Security awareness training and simulated phishing for employees.
Slack
Ticketing & ITSM
Team messaging platform used for real-time collaboration and alerting.
PagerDuty
Ticketing & ITSM
On-call scheduling and incident paging for operations teams.
GitHub
AI / LLM
Git hosting for source code, with Actions for CI and Copilot for AI-assisted development.
OpenAI
AI / LLM
AI research lab providing the GPT model family through its API and ChatGPT.
Anthropic
AI / LLM
AI safety company behind Claude, a family of large language models.
Hugging Face
AI / LLM
Open platform for hosting, sharing and running machine learning models and datasets.
Protect AI
AI / LLM
Security tooling for the machine learning supply chain and model artefacts.
VirusTotal
Threat Intel
Aggregated malware and URL analysis across dozens of antivirus engines.
AbuseIPDB
Threat Intel
Community-reported database of IP addresses associated with abusive activity.
GreyNoise
Threat Intel
Internet background-noise intelligence that separates mass scanning from targeted activity.
Shodan
Threat Intel
Search engine for internet-connected devices and exposed services.
MISP
Threat Intel
Open-source threat intelligence platform for sharing indicators between organisations.
AlienVault OTX
Threat Intel
Open threat exchange where researchers publish and subscribe to indicator pulses.
abuse.ch
Threat Intel
Non-profit tracking malware, botnet command-and-control and malicious URLs.
Spamhaus
Threat Intel
Reputation blocklists for IP addresses and domains involved in spam and malware.
CIRCL
Threat Intel
Luxembourg's computer incident response centre, publishing open threat intelligence services.
CISA
Threat Intel
US cyber defence agency publishing advisories and the Known Exploited Vulnerabilities catalogue.
FIRST
Threat Intel
Global forum of incident response teams, and steward of the CVSS and EPSS standards.
MITRE
Threat Intel
Non-profit behind the ATT&CK and ATLAS knowledge bases and the CVE programme.
Nucleus Security
Vulnerability Mgmt
Vulnerability management platform that consolidates findings from many scanners into one view.
Kestra
Orchestration
Open-source orchestration platform for scheduling and running automation workflows.
Automox
Orchestration
Cloud-native patch and configuration management for endpoints and servers.
Semaphore
Orchestration
Web interface for running and scheduling Ansible playbooks, with full run history.
Elastic
SIEM
Search and analytics engine underpinning the Elastic Stack and its security features.
CyberArk
Identity & Access
Privileged access management for secrets, credentials and administrative accounts.
Lansweeper
Asset Inventory
IT asset discovery and inventory across networks, devices and installed software.
Reliath AI
Knowledge Base
Knowledge-graph retrieval, giving agents a structured source of organisational context.
CyForte Knowledge Base
Knowledge Base
Your own runbooks, policies and business context, made available to every agent.