GreyNoise
Guides
  1. Integrations

Integrations

A Note From GreyNoise on Integrations

GreyNoise wants to make it as easy as possible to integrate into your favorite security tools. Below is a list of tools with integrations today, but we are always looking to expand. If you work with a tool that should be integrated with GreyNoise, please contact us at [email protected].

Current Integrations

Below are some of our most popular integrations.

AI/ML Focused Tools

CompanyProductLinkEnterprise APIFeedCommunity APIMaintained By
BricklayerBricklayerBricklayer

✅

❌

❌

MicrosoftCopilot for SecurityPlugin Details

✅

❌

✅

Jointly

AI/Agent Skills Files

GreyNoise also publishes a list of SKILL files that agentic systems can use to integrate GreyNoise into common workflows. They can be found here:

https://github.com/GreyNoise-Intelligence/skill-templates

SIEM

CompanyProductLinkEnterprise APIFeedCommunity APIMaintained By
CrowdstrikeFalcon NG-SIEMCrowdstrike Foundry

✅

✅

✅

GreyNoise
ElasticElasticSearchElastic Documentation

✅

✅

❌

GreyNoise
ElasticLogstashLogstash GitHub

✅

❌

❌

GreyNoise
GraylogGraylogGraylog Docs

✅

❌

❌

Vendor
GoogleSecOpsGoogle SecOps Integrations

❌

✅

❌

GreyNoise
IBMQRadarIBM App Exchange

✅

❌

❌

GreyNoise
MicrosoftAzure Sentinel - Enrichment Playbooks

Sentinel GitHub - Enterprise

Sentinel GitHub - Community

Blog Post

✅

❌

✅

Vendor
MicrosoftAzure Sentinel - TI FeedAzure Marketplace

✅

✅

❌

GreyNoise
Palo AltoXSIAMSuppored via XSOAR Integration

✅

✅

✅

GreyNoise
PantherPantherPanther Docs

❌

✅

❌

Vendor
SentinelOneAI-SIEMAI SIEM

✅

✅

❌

Vendor
SplunkSplunkSplunkBase

✅

✅

❌

GreyNoise
SumoLogicCloud SIEMSumoLogic Docs

✅

❌

❌

Vendor

XDR

CompanyProductLinkEnterprise APIFeedCommunityMaintained By
HuntersHunters XDRHunters Integrations

✅

❌

✅

Vendor

SOAR

CompanyProductLinkEnterprise APIFeedCommunity APIMaintained By
FortinetFortiSOARFortiSOAR Connector

✅

❌

✅

GreyNoise
GoogleSecOps SOARSecOps SOAR Overview

✅

❌

✅

GreyNoise
IBMResilientIBM App Exchange

✅

❌

❌

Vendor
Palo AltoXSOAR (formerly Demisto)Cortex XSOAR Marketplace

✅

✅

✅

GreyNoise
Rapid7Insight ConnectExtension Library

✅

❌

✅

GreyNoise
ShuffleShuffle SOARShuffle Greynoise API

✅

❌

✅

Vendor
SplunkSOAR (formerly Phantom)

SplunkBase

Playbook Downloads

✅

❌

✅

GreyNoise
SumoLogicSOAR (IncMAN)SumoLogic SOAR Integrations List

✅

❌

❌

Vendor
SwimlaneSwimlaneSwimlane Apphub

✅

❌

✅

Vendor
TinesSOAR PlatformTines Story Library

✅

❌

✅

Vendor
TorqTorqTorq Integrations Docs

✅

❌

❌

Vendor

TIP

CompanyProductLinkEnterprise APIFeedCommunity APIMaitained By
Analyst1Analyst1 PlatformAnalyst1 Integrations

✅

❌

✅

Vendor
AnomaliThreatStream EnrichmentAnomali Marketplace

✅

✅

✅

GreyNoise
CywareCTIXCyware Orchestration integration
Cyware Feed Integration

✅

❌

Vendor
EclecticIQEclecticIQ Intelligence CenterEclecticIQ Integration

✅

✅

✅

Vendor
MISPMISPMISP Github

✅

✅

✅

GreyNoise
OpenCTIConnectorOpenCTI Github

✅

✅

❌

GreyNoise
Recorded FutureSIPRecorded Future Integrations

✅

❌

❌

GreyNoise
ThreatConnectTIPThreatConnect Marketplace

✅

✅

❌

Vendor
ThreatQTIPThreatQ MarketPlace

✅

✅

✅

Vendor
VertexSynapse

Synapse Power-Ups

GreyNoise Power Up

✅

❌

✅

Vendor

Firewall

CompanyProductLinkBlocklist SupportMaintained By
CiscoCustom List - Blacklist IPCisco Networks<p align="center">✅</p>Vendor
FortinetExternal BlocklistForinet Networks<p align="center">✅</p>Vendor
Palo AltoExternal Block List (EBL)Palo Alto Networks<p align="center">✅</p>Vendor
SophosThird-Party FeedsSophos Documentation

✅

Vendor

Other

CompanyProductLinkEnterprise APICommunity APIMaintained By
Arctic SecurityArctic SecurityArctic Security

✅

❌

Vendor
AxoniusCybersecurity Asset ManagementAxonius Docs

✅

❌

Vendor
ArkimeCont3xtCont3xt

❌

✅

Vendor
CriblStreamCribl Packs

✅

❌

GreyNoise
DatadogWorfklow AutomationActions Catalog

✅

❌

Vendor
InfracastInfracastInfracast Docs<p align="center">❌</p><p align="center">✅</p>Vendor
ZScalerDeceptionZScaler Deception Docs

✅

❌

Vendor

Analyst Tools / OSINT

CompanyProductLinkEnterprise APICommunity APIMaintained By
GigasheetGigasheetGigasheet

✅

❌

Vendor
HarpoonCLI ToolHarpoon Github

✅

✅

Vendor
The HiveCortex AnalyzerTheHive Github

✅

❌

GreyNoise Contributes
MaltegoMaltegoTransform Hub

✅

✅

GreyNoise
Outcome SecurityKaleidoscopeKaleidoscope

✅

✅

Vendor
PolarityPolarityPolarity GitHub

✅

✅

Vendor
pOSINTpOSINTpOSINT Github

✅

❌

Vendor
SpiderfootSpiderfootSpiderfoot GH

✅

✅

GreyNoise Contributes
SputnikBrowser ExtensionSputnik GitHubUses GreyNoise Visualizer OnlyUses GreyNoise Visualizer OnlyVendor

Other Community Contributed Integrations

AuthorProductLinkEnterprise APICommunity API
CowrieCowrieCowrie GitHub

❌

✅

CyberGordonCyberGordonCyberGordon

❌

✅

AndrewPlaGreyNoisePSGreyNoisePS GitHub

✅

✅

hrbrmstrGreyWatchGreyWatch GitHub

❌

✅

IntelOwlIntelOwlIntelOwl GitHub

✅

✅

matamorphosisScrummageScrummage GitHub

❌

✅

HurricaneLabsMachinaeHL Github

❌

✅

SageCanary-GreyNoise-Community-Threat-Intel-Report via ThinkstThinkst Canary GH

❌

✅

SageCanary-GreyNoise-Enterprise-Threat-Intel-Report via ThinkstThinkst Canary GH

✅

❌

NinosekiMihariNinoseki Github

✅

❌

NinosekiMitakaNinoseki Github

✅

✅

ThreatDudesGreyNoise Discord AlertsThreatDudes Github

✅

❌

Backchannel Inc.GreyNoise Cloudflare WorkerBackchannelinc Github

❌

✅

Brex HQSubstationSubstation Docs

✅

✅

Updated 4 days ago

Did this page help you?