SOAR Integrations
April 29, 2025 ยท View on GitHub
This section provides documentation for the various integrations available with the SecOps SOAR MCP Server. Over 100 integrations are available, allowing interaction with a wide range of security tools and platforms.
Below is a list of documented integrations. Select an integration to view its specific tools and usage instructions.
- Active Directory
- Alexa
- Algo Sec
- Alien Vault Anywhere
- Alien Vault Appliance
- Alien Vault TI
- Amazon Macie
- Anomali
- Anomali Staxx
- Anomali Threat Stream
- Any Run
- API Void
- App Sheet
- Arc Sight Logger
- Arcsight
- Area1
- Armis
- Atlassian Confluence Server
- Attivo
- Auto Focus
- Automox
- AWS Cloud Trail
- AWS Cloud Watch
- AWS EC2
- AWS Guard Duty
- AWS IAM
- AWS IAM Access Analyzer
- AWS S3
- AWS Security Hub
- AWS WAF
- Axonius
- Azure Active Directory
- Azure AD Identity Protection
- Azure Security Center
- Bit Sight
- Blue Liv
- BMC Helix Remedy Force
- BMC Remedy ITSM
- Bulk Who Is
- CA Service Desk
- Case Federation
- CB Cloud
- CB Defense
- CB Enterprise EDR
- CB Live Response
- CB Protection
- CB Response
- Certly
- Check Point Cloud Guard
- Check Point Firewall
- Check Point Sand Blast
- Check Point Threat Reputation
- Cisco AMP
- Cisco Firepower Management Center
- Cisco ISE
- Cisco Orbital
- Cisco Threat Grid
- Cisco Umbrella
- Cloud Logging
- Cloudflare
- Cofense Triage
- Connect Wise
- Crowd Strike Falcon
- CSV
- Cuckoo
- Cyber Ark PAM
- Cyber Ark Vault
- Cyber X
- Cybereason
- Cyberint
- Cylance
- Cynet
- D Shield
- Darktrace
- Deep Sight
- Devo
- Digital Shadows
- Domain Tools
- Easy Vista
- Elastic Search
- Elastic Search V7
- Elastica Cloud SOC
- Email V2
- Endgame
- Exabeam Advanced Analytics
- Exchange
- Exchange Extension Pack
- Extrahop
- F5 Big IQ
- F5 BigI PI Control API
- F5 BigIP Access Policy Manager
- Falcon Sandbox
- File Operation
- Fire Eye AX
- Fire Eye CM
- Fire Eye ETP
- Fire Eye EX
- Fire Eye Helix
- Fire Eye HX
- Fire Eye NX
- Fore Scout Counter Act
- Forti Analyzer
- Forti Manager
- Fortigate
- Fortinet Forti SIEM
- Freshworks Freshservice
- G Suite
- Gmail
- Google Alert Center
- Google Big Query
- Google Chat
- Google Chronicle
- Google Cloud API
- Google Cloud Armor
- Google Cloud Asset Inventory
- Google Cloud Compute
- Google Cloud IAM
- Google Cloud Policy Intelligence
- Google Cloud Recommender
- Google Cloud Storage
- Google Forms
- Google GKE
- Google GRR
- Google Security Command Center
- Google Translate
- Harmony Mobile
- Hashi Corp Vault
- Have I Been Pwned
- HCL Big Fix Inventory
- HTTP
- HTTPv2
- Humio
- I Boss
- Illusive Networks
- Internet Storm Center
- Intezer
- Intsights
- IP Info
- IP Void
- Iron Port
- Iron Scales
- Ivanti Endpoint Manager
- Jira
- Joe Sandbox
- Juniper VSRX
- Lastline
- Log Point
- Log Rhythm
- Mal Share
- Malware Domain List
- Mandiant
- Mandiant ASM
- Mandiant Digital Threat Monitoring
- Mandiant Managed Defense
- Mandiant Threat Intelligence
- McAfee Active Response
- McAfee ATD
- McAfee EPO
- McAfee ESM
- McAfee Mvision EDR
- McAfee Mvision EDRv2
- McAfee Mvision EPO
- McAfee Mvision EPOv2
- McAfee NSM
- McAfee TIEDXL
- McAfee Web Gateway
- Micro Focus ITSMA
- Microsoft Azure Sentinel
- Microsoft Defender ATP
- Microsoft Graph Mail
- Microsoft Graph Mail Delegated
- Microsoft Graph Security
- Microsoft Intune
- Microsoft Teams
- Microsoft365 Defender
- Mimecast
- MISP
- Mitre ATT&CK
- Mobile Iron
- Mongo DB
- MSSQL
- MX Tool Box
- MySQL
- Nessus Scanner
- Netskope
- Nozomi Networks
- Observe IT
- Office365 Cloud App Security
- Office365 Management API
- Okta
- Opswat Metadefender
- Orca Security
- Outpost24
- Palo Alto Cortex XDR
- Palo Alto NGFW
- Palo Alto Panorama
- Palo Alto Prisma Cloud
- Palo Alto Wildfire
- Passive Total
- Phishing Initiative
- Phishrod
- Portnox
- PostgreSQL
- Proof Point PS
- Proof Point TAP
- Proofpoint Trap
- Protectwise
- Pub Sub
- Pulsedive
- Q Radar
- Qualys EDR
- Qualys FIM
- Qualys VM
- Rapid7 Insight IDR
- Rapid7 Insight VM
- Recorded Future
- Redis
- Remote Agent Utilities
- ReversingLabs A1000
- ReversingLabs Titanium
- RSA Archer
- RSA Net Witness
- RSA Net Witness EDR
- RSA Net Witness Platform
- Runners
- Salesforce
- SCC Enterprise
- SCCM
- Screenshot Machine
- Sentinel One
- Sentinel One V2
- SEP
- SEP12
- Service Desk Plus
- Service Desk Plus V3
- Service Now
- Shodan
- Siemplify
- Siemplify Threat Fuse
- Siemplify Utilities
- Site24x7
- Slack
- Snowflake
- Solar Winds Orion
- Sonic Wall Beta
- Sophos
- Splash
- Splunk
- Spy Cloud
- SSH
- SSL Labs
- Stealthwatch
- Stellar Cyber Starlight
- Sumo Logic Cloud SIEM
- Sumologic
- Symantec ATP
- Symantec Blue Coat Proxy SG
- Symantec Content Analysis
- Symantec ICDX
- Sys Aid
- Sysdig Secure
- Tanium
- Tenable IO
- Tenable Security Center
- Threat Connect
- Threat Crowd
- Threat Exchange
- Threat Q
- Tor
- Trend Micro Apex Central
- Trend Micro Cloud App Security
- Trend Micro DDAN
- Trend Micro Deep Security
- Trend Vision One
- TruSTAR
- Twilio
- Unshorten Me
- URLScan IO
- URL Void
- V Sphere
- Varonis Data Security Platform
- Vectra
- Vertex AI
- VirusTotal
- VirusTotal V3
- VMRay
- Web Risk
- WMI
- X-Force
- Zabbix
- Zendesk
- Zoho Desk
- Zscaler