Skip to content
HisnHub

Connect the security tools you already operate.

HisnHub is designed to work with specialized security and enterprise platforms rather than requiring organizations to replace them.

Integrations bring security signals and context into HisnHub, where they can be normalized, related to governed assets and business context, and connected to risk, controls, ownership, and remediation.

Integration Categories

Endpoint Security / EDR / XDR

Bring endpoint findings, alerts, device context, and related security information into HisnHub.

Cloud Security

Connect cloud findings, workloads, configurations, assets, and security context.

SIEM & Security Analytics

Connect relevant detection, alert, and incident context.

Vulnerability Management

Import vulnerability findings and associate them with governed assets and remediation.

Application Security

Connect findings from application security testing and security engineering workflows.

Identity & Access

Bring identity context into reviews, investigations, governance, and risk processes.

ITSM & Ticketing

Coordinate remediation and operational tasks with existing service-management processes.

Cloud Platforms

Bring infrastructure and asset context from supported cloud providers.

Developer Platforms

Connect applications, repositories, development ownership, and engineering workflows.

Threat Intelligence

Enrich security records with relevant threat context where supported.

Enterprise Systems

Connect business and ownership context from supported enterprise platforms.

Integration Catalog

Security, cloud, identity, development, and enterprise connectors with explicit release scope and availability.

16 Available for Early Access12 In Development23 Planned — Roadmap

51 integrations

Early Access and Initial Phased Release Scope

  • Microsoft Defender XDR

    EDR / XDR

    Incidents, alerts, entities, devices, Defender for Endpoint context.

    Available for Early Access

  • Microsoft Sentinel

    SIEM

    Incidents, alerts, entities, investigation context.

    Available for Early Access

  • Microsoft Defender for Cloud

    CNAPP / Cloud

    Cloud resources, alerts, recommendations, security posture.

    Available for Early Access

  • Microsoft Entra ID

    Identity

    Users, groups, identities, access/security context.

    Available for Early Access

  • CrowdStrike Falcon / Falcon Insight XDR

    EDR / XDR

    Hosts, detections, incidents, endpoint context.

    Available for Early Access

  • Wiz

    CNAPP

    Cloud assets, issues, vulnerabilities, exposures, risk context.

    Available for Early Access

  • Tenable One Vulnerability Management

    Vulnerability

    Assets, vulnerabilities, severity and scanner context.

    Available for Early Access

  • Qualys VMDR

    Vulnerability

    Assets, detections, vulnerabilities, QID context.

    Available for Early Access

  • Splunk Enterprise Security

    SIEM / SecOps

    Findings, notable security activity, investigation context.

    Available for Early Access

  • Jira Software / Jira Service Management

    ITSM

    Remediation tasks, ownership, status synchronization.

    Available for Early Access

  • ServiceNow

    ITSM / CMDB

    Incidents, remediation work, CMDB/asset context.

    Available for Early Access

  • Microsoft Azure

    Cloud Platform

    Subscriptions, resources, ownership and cloud asset context.

    Available for Early Access

  • Amazon Web Services

    Cloud Platform

    Accounts, resources, cloud asset and ownership context.

    Available for Early Access

  • GitHub

    Developer Platform

    Repositories, ownership and supported security findings.

    Available for Early Access

  • Azure DevOps

    Developer Platform

    Repositories, projects, work items and development context.

    Available for Early Access

  • Snyk

    AppSec

    Application/dependency security issues, projects, remediation context.

    Available for Early Access

In Development

  • SentinelOne Singularity XDR

    EDR / XDR

    Endpoint alerts, threats, assets and incidents.

    In Development — Next

  • Palo Alto Networks Cortex XDR

    EDR / XDR

    Alerts, incidents, endpoints and investigation context.

    In Development — Next

  • Palo Alto Networks Prisma Cloud

    CNAPP

    Cloud assets, vulnerabilities, posture and runtime findings.

    In Development — Next

  • Orca Security

    CNAPP

    Cloud assets, attack paths, vulnerabilities and cloud risks.

    In Development

  • Google Security Operations

    SIEM / SecOps

    Alerts, cases, entities and investigation context.

    In Development — Next

  • Rapid7 InsightVM

    Vulnerability

    Assets, vulnerabilities and remediation context.

    In Development — Next

  • Checkmarx One

    AppSec

    SAST/SCA and application security findings.

    In Development

  • GitLab

    Developer / AppSec

    Projects, repositories and supported security findings.

    In Development — Next

  • Okta

    Identity

    Users, groups, access and identity context.

    In Development — Next

  • CyberArk

    PAM

    Privileged identity and access context.

    In Development — Next

  • SailPoint

    Identity Governance

    Identities, access governance and review context.

    In Development

  • Google Cloud

    Cloud Platform

    Projects, resources and cloud asset context.

    In Development

Planned — Roadmap

  • Sophos XDR

    EDR / XDR

    Endpoint detections and security context.

    Planned — Roadmap

  • Trend Vision One

    XDR

    Alerts, incidents, entities and cross-layer security context.

    Planned — Roadmap

  • Carbon Black Cloud

    Endpoint

    Alerts, devices, endpoint events and vulnerabilities.

    Planned — Roadmap

  • Check Point CloudGuard

    CNAPP

    Cloud posture, assets and security findings.

    Planned — Roadmap

  • Sysdig Secure

    CNAPP

    Cloud/runtime risks, vulnerabilities and workload context.

    Planned — Roadmap

  • Fortinet FortiCNAPP

    CNAPP

    Cloud posture, workload vulnerabilities and findings.

    Planned — Roadmap

  • Tenable Cloud Security

    Cloud Security

    Cloud assets, exposure and cloud security context.

    Planned — Roadmap

  • Elastic Security

    SIEM / XDR

    Alerts, cases, hosts and detection context.

    Planned — Roadmap

  • IBM QRadar SIEM

    SIEM

    Offenses, events and investigation context.

    Planned — Roadmap

  • Palo Alto Networks Cortex XSIAM

    SIEM / SecOps

    Incidents, alerts and SecOps context.

    Planned — Roadmap

  • Sumo Logic Cloud SIEM

    SIEM

    Signals, insights and security events.

    Planned — Roadmap

  • LogRhythm

    SIEM

    Alarms, cases and security-event context.

    Planned — Roadmap

  • Rapid7 InsightIDR

    SIEM / SecOps

    Investigations, alerts and detection context.

    Planned — Roadmap

  • Veracode

    AppSec

    Application findings and vulnerability context.

    Planned — Roadmap

  • SonarQube

    AppSec

    Code quality/security issues and project context.

    Planned — Roadmap

  • Bitbucket

    Developer Platform

    Repositories and development ownership.

    Planned — Roadmap

  • Oracle Cloud Infrastructure

    Cloud Platform

    Tenancies, compartments and cloud resources.

    Planned — Roadmap

  • MISP

    Threat Intelligence

    Indicators, threat objects and intelligence context.

    Planned — Roadmap

  • VirusTotal

    Threat Intelligence

    IOC enrichment and reputation context.

    Planned — Roadmap

  • Recorded Future

    Threat Intelligence

    Threat-intelligence enrichment and risk context.

    Planned — Roadmap

  • Microsoft Teams

    Collaboration

    Notifications and security workflow collaboration.

    Planned — Roadmap

  • Slack

    Collaboration

    Notifications and security workflow collaboration.

    Planned — Roadmap

  • PagerDuty

    Incident Response

    Escalations, notifications and response workflows.

    Planned — Roadmap

These connectors are available for supported Early Access evaluations within the initial phased release scope, subject to supported versions, source-system permissions, and the agreed environment. In Development identifies current work; Next highlights the nearest wave. Planned identifies later roadmap work without committed dates. Listing does not imply vendor partnership or endorsement.

Connected security

Connect the tools your security teams rely on.

Tell us which systems you use and how their findings should connect to ownership, risk, governance, and remediation.

Contact Us