Integrations

Integrations that power identity threat protection

Put SpyCloud data to work where it matters most, to you. Our out-of-the-box integrations scale detection, remediation, and incident response workflows for seamless protection of exposed employee and consumer identities.

Active Directory Guardian

Automate credential resets in as little as 5 minutes from discovery

Anomali

Enrich Anomali threat intel with exposed identity data

Cortex XSOAR

SOAR

Enhance XSOAR playbooks with exposed identity intelligence

Crowdstrike Falcon

Stop identity-driven threats with SpyCloud’s recaptured malware data

Crowdstrike Next-Gen SIEM

SIEM

Enrich detection with SpyCloud identity exposure alerts

Datadog

OBSERVABILITY

Correlate identity data with other events and logs within Datadog

Elastic

SIEM

Ingest SpyCloud identity data into Elastic for faster detection

Google SecOps

SIEM, SOAR

Enrich SecOps workflows with SpyCloud identity data

Jupyter

OSINT

Query SpyCloud identity intelligence to enrich investigations

Maltego

OSINT

Visualize and analyze identity exposure connections directly within Maltego

Microsoft Defender for Endpoint

Detect, isolate, and remediate compromised devices with SpyCloud data

Microsoft Entra ID Guardian

Extend automated identity protection to Microsoft’s cloud directory services

Microsoft Sentinel

SIEM, SOAR

Automate incident response using identity exposure in Sentinel playbooks

Okta Identity Threat Protection

ITDR

Strengthen Okta ITP using SpyCloud SSF identity-risk signals

Okta Workforce Guardian

Enforce password hygiene and prevent ATO within Okta Workforce

PingOne Advanced Identity Cloud

CIAM

Automatically remediate exposed consumer credentials

PingOne DaVinci Connector

Get ahead of exposed credentials across workforce identities

Splunk

SIEM

Enrich Splunk events with exposed identity data for faster detection and triage

ThreatQuotient

Enrich threat intel workflows with identity exposure data

Tines

SOAR

Build endless automation in Tines with high-fidelity SpyCloud data

SpyCloud Connect

Whatever workflow you want, wherever you want it. SpyCloud Connect builds out custom workflows for your desired integrations to send SpyCloud identity intelligence data where and when you need it – all in the tools you are using today. We’ll handle the custom development, delivery, and maintenance so your teams can focus on action, not integration.