OpenVPN
OpenVPN is an open-source virtual private network (VPN) software, offering robust encryption, secure connectivity, flexible and reliable remote access to networks for individuals and businesses globally.
OPNsense / pfSense / OpenBSD Packet Filter
OPNSense is a firewall software distribution based on FreeBSD.
PagerDuty playbooks
PagerDuty is an incident response platform for IT departments it allows triggering alerts and managing incidents.
Palo Alto Cortex Data Lake
Palo Alto Networks offers an enterprise cybersecurity platform which provides network security, cloud security, endpoint protection, and various cloud-delivered security services.
Palo Alto Cortex XDR (EDR)
Palo Alto Cortex XDR (EDR) is an advanced Endpoint Detection and Response solution offering real-time threat detection, investigation, and response capabilities.
Palo Alto Cortex XDR (EDR) playbooks
Cortex XDR is the detection and response app that natively integrates network, endpoint and cloud data to stop sophisticated attacks.
Palo Alto Cortex XSOAR (CTI integration)
On Sekoia XDR, you need to create an API key with the following a specific permission.
Palo Alto Cortex XSOAR (XDR integration)
This integration serves as an extension that leverages the Sekoia.io Defend (XDR) API, enabling requests from the Cortex XSOAR interface.
Palo Alto NGFW
Palo Alto Networks offers an enterprise cybersecurity platform which provides network security, cloud security, endpoint protection, and various cloud-delivered security services.
Palo Alto Prisma Access
Palo Alto Prisma Access is a cloud-delivered security platform that provides secure access to applications and data.
Ping Identy - PingFederate
PingFederate is an enterprise federation server from Ping Identity that provides secure single sign-on (SSO), API security, and identity bridging.
Postfix
Postfix is a free and open-source mail transfer agent that routes and delivers electronic mail.
Pradeo Mobile Threat Defense
Pradeo Mobile Threat Defense (MTD) is a comprehensive security solution designed to protect mobile devices from various threats such as malware, phishing, and network attacks.
Prodaft USTA
USTA is a market-leading threat intelligence solution provided by PRODAFT specifically designed to combat ransomware, online fraud, and account takeover attempts.
Proofpoint PoD
ProofPoint On Demand (PoD) offers a real-time email processing feed to detect, classify and mitigate threats.
Proofpoint TAP
Proofpoint Targeted Attack Protection (TAP) helps detect, mitigate, and block advanced threats that target people through email.
Qevlar AI
Qevlar AI is an Autonomous SOC Analyst platform designed to automate the heavy lifting of security investigations.
Radware DefensePro
Radware is a leading provider of cybersecurity and application-delivery solutions that keep enterprise applications fast, available and secure across on-premises, cloud and hybrid environments.
Raw events
The Raw Event Format is a generic format that accepts any format of event.
ReliaQuest GreyMatter/ Digital Shadows SearchLight
Digital Shadows SearchLight continuously searches and identifies any unwanted exposures, and provides contextualised alerts to better understand the associated risks.
Retarus Email Security
Protection solution for user and technical messaging.
RSA SecurID
SecurID is a token system, or authenticator, produced by RSA Security and intended to offer strong authentication to its user in the context of access to an information system.
RSS playbooks
RSS Playbooks is a strategic framework used primarily by cybersecurity teams to automate and standardize their response to security threats.
Rubycat PROVE IT
PROVE IT by Rubycat is a privileged access management solution.
Salesforce
Salesforce provides customer relationship management software and applications focused on sales, customer service, marketing automation, e-commerce, analytics, and application development.
Seckiot Citadelle
Seckiot Citadelle is an integrated cybersecurity platform designed for industrial control systems (ICS) and operational technology (OT) environments.
SecurityScorecard VAS
SecurityScorecard's Vulnerability Assessment Scanner is a tool designed to identify and assess vulnerabilities in an organization's digital infrastructure.
Sekoia.io Activity Logs
Sekoia activity logs collect operations done, on Sekoia.io, by the members of the community. It helps to monitor activities and detect malicious behavior.
Sekoia.io Agent (Windows, Linux, MacOS)
Sekoia provides its agent for collecting security-related events with a minimal configuration overhead. This agent sends events directly to Sekoia.
Sekoia.io playbooks
An Action helps you execute specific tasks depending on your needs. There are 5 main types of actions in the playbooks.