Need a new integration?
We’ve got the expertise to ensure you have the optimal
tools at your disposal to maximise your security workflow.
We Integrate with the tools our customers need
Our cutting-edge workflow platform seamlessly integrates with your existing tools. Need an integration you don't see? Let us know and we'll build it.
Sources
Components that fetch the resources which you need to scan.
GitHub
Clone a Git repository from a remote origin.
Dependency
Accepts a pURL argument belonging to one of the supported types and generates a dependency file relevant to the type.
Producers
Components that scan your resources and produce security alerts.
OSSF Scorecard
Generates scorecards for open source projects to show how they adhere with best practices.
CDX Gen
Generate a CycloneDX SBOM from source code.
Trufflehog
Secret scanner for repositories.
Snyk Docker
Run Snyk For Docker.
Snyk Python
Run Snyk For Python.
Python Bandit
SAST scanner that analyses Python source code to look for security issues.
Python PIP Safety
Dependency scanner for Python projects.
Golang Gosec
Analyse Go source code to look for security issues.
Golang Nancy
Dependency scanner for Golang projects.
Semgrep
Analyse source code using Semgrep to look for security issues.
Enrichers
Components that enrich your security alerts with more details and turn them into actionable events.
Codeowners
Identifies a code owner for each finding.
DepsDev
Adds context from deps.dev for each third-party dependency.
Training
Adds relevant training resources to findings.
Reachability
Performs a reachability check on a supplied repository using AppThreat/atom.
Deduplication
Compares multiple inputs and removes duplicates.
Knowledgebase
Adds knowledge base information (e.g. OWASP Cheat Sheets) to findings.
Policy
Enforces security policies defined in OPA for each finding.
LLM
Adds information to findings using a language model.
Multitool Deduplication
Deduplicates findings from multiple tools.
Custom Annotation
Adds custom annotations to instances.
Standards
Adds security standard information to findings using OpenCRE.
Consumers
Components that consume and display your security alerts.
Pushes findings to an S3 bucket as PDFs.
DefectDojo
Pushes findings to a DefectDojo vulnerability management instance.
stdout JSON
Prints findings to stdout in JSON format.
Slack
Pushes findings to a Slack channel.
Jira
Pushes findings to a Jira instance.
ElasticSearch
Pushes findings to an Elasticsearch database.