SOAR Integrations

This section provides documentation for the various integrations available with the SecOps SOAR MCP Server. Over 100 integrations are available, allowing interaction with a wide range of security tools and platforms.

Below is a list of documented integrations. Select an integration to view its specific tools and usage instructions.

• Active Directory

• Alexa

• Algo Sec

• Alien Vault Anywhere

• Alien Vault Appliance

• Alien Vault TI

• Amazon Macie

• Anomali

• Anomali Staxx

• Anomali Threat Stream

• Any Run

• API Void

• App Sheet

• Arc Sight Logger

• Arcsight

• Area1

• Armis

• Atlassian Confluence Server

• Attivo

• Auto Focus

• Automox

• AWS Cloud Trail

• AWS Cloud Watch

• AWS EC2

• AWS Guard Duty

• AWS IAM

• AWS IAM Access Analyzer

• AWS S3

• AWS Security Hub

• AWS WAF

• Axonius

• Azure Active Directory

• Azure AD Identity Protection

• Azure Security Center

• Bit Sight

• Blue Liv

• BMC Helix Remedy Force

• BMC Remedy ITSM

• Bulk Who Is

• CA Service Desk

• Case Federation

• CB Cloud

• CB Defense

• CB Enterprise EDR

• CB Live Response

• CB Protection

• CB Response

• Certly

• Check Point Cloud Guard

• Check Point Firewall

• Check Point Sand Blast

• Check Point Threat Reputation

• Cisco AMP

• Cisco Firepower Management Center

• Cisco ISE

• Cisco Orbital

• Cisco Threat Grid

• Cisco Umbrella

• Cloud Logging

• Cloudflare

• Cofense Triage

• Connect Wise

• Crowd Strike Falcon

• CSV

• Cuckoo

• Cyber Ark PAM

• Cyber Ark Vault

• Cyber X

• Cybereason

• Cyberint

• Cylance

• Cynet

• D Shield

• Darktrace

• Deep Sight

• Devo

• Digital Shadows

• Domain Tools

• Easy Vista

• Elastic Search

• Elastic Search V7

• Elastica Cloud SOC

• Email V2

• Endgame

• Exabeam Advanced Analytics

• Exchange

• Exchange Extension Pack

• Extrahop

• F5 Big IQ

• F5 BigI PI Control API

• F5 BigIP Access Policy Manager

• Falcon Sandbox

• File Operation

• Fire Eye AX

• Fire Eye CM

• Fire Eye ETP

• Fire Eye EX

• Fire Eye Helix

• Fire Eye HX

• Fire Eye NX

• Fore Scout Counter Act

• Forti Analyzer

• Forti Manager

• Fortigate

• Fortinet Forti SIEM

• Freshworks Freshservice

• G Suite

• Gmail

• Google Alert Center

• Google Big Query

• Google Chat

• Google Chronicle

• Google Cloud API

• Google Cloud Armor

• Google Cloud Asset Inventory

• Google Cloud Compute

• Google Cloud IAM

• Google Cloud Policy Intelligence

• Google Cloud Recommender

• Google Cloud Storage

• Google Forms

• Google GKE

• Google GRR

• Google Security Command Center

• Google Translate

• Harmony Mobile

• Hashi Corp Vault

• Have I Been Pwned

• HCL Big Fix Inventory

• HTTP

• HTTPv2

• Humio

• I Boss

• Illusive Networks

• Internet Storm Center

• Intezer

• Intsights

• IP Info

• IP Void

• Iron Port

• Iron Scales

• Ivanti Endpoint Manager

• Jira

• Joe Sandbox

• Juniper VSRX

• Lastline

• Log Point

• Log Rhythm

• Mal Share

• Malware Domain List

• Mandiant

• Mandiant ASM

• Mandiant Digital Threat Monitoring

• Mandiant Managed Defense

• Mandiant Threat Intelligence

• McAfee Active Response

• McAfee ATD

• McAfee EPO

• McAfee ESM

• McAfee Mvision EDR

• McAfee Mvision EDRv2

• McAfee Mvision EPO

• McAfee Mvision EPOv2

• McAfee NSM

• McAfee TIEDXL

• McAfee Web Gateway

• Micro Focus ITSMA

• Microsoft Azure Sentinel

• Microsoft Defender ATP

• Microsoft Graph Mail

• Microsoft Graph Mail Delegated

• Microsoft Graph Security

• Microsoft Intune

• Microsoft Teams

• Microsoft365 Defender

• Mimecast

• MISP

• Mitre ATT&CK

• Mobile Iron

• Mongo DB

• MSSQL

• MX Tool Box

• MySQL

• Nessus Scanner

• Netskope

• Nozomi Networks

• Observe IT

• Office365 Cloud App Security

• Office365 Management API

• Okta

• Opswat Metadefender

• Orca Security

• Outpost24

• Palo Alto Cortex XDR

• Palo Alto NGFW

• Palo Alto Panorama

• Palo Alto Prisma Cloud

• Palo Alto Wildfire

• Passive Total

• Phishing Initiative

• Phishrod

• Portnox

• PostgreSQL

• Proof Point PS

• Proof Point TAP

• Proofpoint Trap

• Protectwise

• Pub Sub

• Pulsedive

• Q Radar

• Qualys EDR

• Qualys FIM

• Qualys VM

• Rapid7 Insight IDR

• Rapid7 Insight VM

• Recorded Future

• Redis

• Remote Agent Utilities

• ReversingLabs A1000

• ReversingLabs Titanium

• RSA Archer

• RSA Net Witness

• RSA Net Witness EDR

• RSA Net Witness Platform

• Runners

• Salesforce

• SCC Enterprise

• SCCM

• Screenshot Machine

• Sentinel One

• Sentinel One V2

• SEP

• SEP12

• Service Desk Plus

• Service Desk Plus V3

• Service Now

• Shodan

• Siemplify

• Siemplify Threat Fuse

• Siemplify Utilities

• Site24x7

• Slack

• Snowflake

• Solar Winds Orion

• Sonic Wall Beta

• Sophos

• Splash

• Splunk

• Spy Cloud

• SSH

• SSL Labs

• Stealthwatch

• Stellar Cyber Starlight

• Sumo Logic Cloud SIEM

• Sumologic

• Symantec ATP

• Symantec Blue Coat Proxy SG

• Symantec Content Analysis

• Symantec ICDX

• Sys Aid

• Sysdig Secure

• Tanium

• Tenable IO

• Tenable Security Center

• Threat Connect

• Threat Crowd

• Threat Exchange

• Threat Q

• Tor

• Trend Micro Apex Central

• Trend Micro Cloud App Security

• Trend Micro DDAN

• Trend Micro Deep Security

• Trend Vision One

• TruSTAR

• Twilio

• Unshorten Me

• URLScan IO

• URL Void

• V Sphere

• Varonis Data Security Platform

• Vectra

• Vertex AI

• VirusTotal

• VirusTotal V3

• VMRay

• Web Risk

• WMI

• X-Force

• Zabbix

• Zendesk

• Zoho Desk

• Zscaler