Integrations

Three ways to connect

1. 01

   IoC list URLs

   Lists filtered by score range and type are published as TXT or JSON. Your firewall's external block list, proxy or SIEM pulls the URL on a schedule; nobody updates the list by hand.

2. 02

   REST API

   Cases, IoC lists, IP feed lists and hunting rules are read and written through endpoints with an OpenAPI schema. Keys expire and carry only the permissions you choose.

3. 03

   Event notifications

   Playbook actions and notifications reach the right channel on a critical finding, a new listing or the weekly summary — with the case number and a link.