Integrations

Your Security Stack,
Fully Connected

CyFlare delivers truly open, API-driven cybersecurity integrations that allow organizations to connect the tools they already use. With 400+ supported integrations, our platform ingests, normalizes, and correlates data across SIEM, EDR, identity, network, cloud, and collaboration systems, enabling a fully converged security ecosystem.

Whether you use CrowdStrike, SentinelOne, Microsoft, Splunk, Check Point, Google, Okta, Palo Alto, AWS, or hundreds of others, CyFlare makes it simple to plug in your existing tools and get immediate value.

Browse Sample Cybersecurity Integrations

CISA highlights the importance of strong integration of security tools to maintain visibility and reduce supply chain risk.

Below is a sample collection of the 400+ cybersecurity integrations supported across the CyFlare ONE Platform. Search by product, capability, or service to see how easily CyFlare connects to your environment. 

Not seeing a tool you rely on? Let us know. With 400+ integrations and an open API framework, we can often support products that are not yet listed in the directory.

Find Integrations
Ingestion Methods
Operational Capabilities
CyFlare Services

Zscaler

Vectra

Symantec Endpoint Protection

Sumologic

Splunk

QRadar

Palo Alto Cortex XDR

Nozomi Networks

McAfee Mvision EDR

LogRhythm

Humio

Google Chronicle

FortiSIEM

Endgame

Elastic Search

Devo

Darktrace

Cisco ISE

Carbon Black

Arcsight

Alien Vault USM Anywhere

NetSkope

LastPass

Indusface

Imperva Incapsula

Cloudflare

Cisco Umbrella

Broadcom (BlueCoat / Symantec) WSS

Amazon Security Lake

Tenable SC

Tenable.io

Rapid7 IVM

Qualys

Nessus Scanner

Cyrisma

CyberCNS

HanDreamnet Security Switch

Cato Networks

Salesforce

Office 365

Microsoft Entra ID

Google Workspace

Box

SSH Host

Oracle Cloud Infrastructure

Google Cloud Audit Logging

Generic S3

Azure Event Hub

AWS GuardDuty

AWS CloudWatch

AWS CloudTrail

One Login

Okta

JumpCloud

Duo Security

Active Directory

Thinkst Canary

Sophos XG Firewall

Sonic Wall Firewall

Palo Alto Firewall

Hillstone

Fortigate

F5 Silverline

F5 BIG-IP ASM

F5 BIG-IP Firewall

Cisco Meraki Firewall

Cisco Firepower

Check Point Firewall

AWS

Webroot

VMWare Workspace One

VMWare Carbon Black Cloud

Trend Micro Vision One

Trend Micro Cloud One Workload Security

Trend Micro Apex Central

Trellix Mvision

Trellix (Fireye) Endpoint Security HX

Sophos Central

Sonicwall Capture Client

Lima Charlie

Jamf Protect

HiBUN

Forescout

Deep Instinct

Cynet

Cybereason

CrowdStrike Hosts/Events

Cisco AMP

Broadcom Symantec Endpoint Security

Blackberry Cylance

Bitdefender

Akamai

Acronis Cyber Protect Cloud

Symantec Email Security Cloud

Proofpoint TAP

Proofpoint on Demand

Mimecast

Barracuda Email Security

MySQL

MS SQL Server

Symantec Cloud Workload Protection

Palo Alto Prima Cloud

Recorded Future

Stellar Cyber

Crowdstrike EDR

Azure Sentinel

Virus Total

SentinelOne EDR

Microsoft – Defender for Endpoint