Integrations
A Note From GreyNoise on Integrations
GreyNoise wants to make it as easy as possible to integrate into your favorite security tools. Below is a list of tools with integrations today, but we are always looking to expand. If you work with a tool that GreyNoise should be integrated with, please contact us at [email protected].
Current Integrations
Below are some of our most popular integrations.
AI/ML Focused Tools
| Company | Product | Link | Enterprise API | Feed | Community API | Maintained By |
|---|---|---|---|---|---|---|
| Bricklayer | Bricklayer | Bricklayer | ✅ | ❌ | ❌ | |
| Microsoft | Copilot for Security | Plugin Details | ✅ | ❌ | ✅ | Jointly |
SIEM
| Company | Product | Link | Enterprise API | Feed | Community API | Maintained By |
|---|---|---|---|---|---|---|
| Crowdstrike | Falcon NG-SIEM | Crowdstrike Foundry | ✅ | ✅ | ✅ | GreyNoise |
| Elastic | ElasticSearch | Elastic Documentation | ✅ | ✅ | ❌ | GreyNoise |
| Elastic | Logstash | Logstash GitHub | ✅ | ❌ | ❌ | GreyNoise |
| Graylog | Graylog | Graylog Docs | ✅ | ❌ | ❌ | Vendor |
| SecOps | Google SecOps Integrations | ❌ | ✅ | ❌ | GreyNoise | |
| IBM | QRadar | IBM App Exchange | ✅ | ❌ | ❌ | GreyNoise |
| Microsoft | Azure Sentinel - Enrichment Playbooks | ✅ | ❌ | ✅ | Vendor | |
| Microsoft | Azure Sentinel - TI Feed | Azure Marketplace | ✅ | ✅ | ❌ | GreyNoise |
| Palo Alto | XSIAM | Suppored via XSOAR Integration | ✅ | ✅ | ✅ | GreyNoise |
| Panther | Panther | Panther Docs | ❌ | ✅ | ❌ | Vendor |
| SentinelOne | AI-SIEM | AI SIEM | ✅ | ✅ | ❌ | Vendor |
| Splunk | Splunk | SplunkBase | ✅ | ✅ | ❌ | GreyNoise |
| SumoLogic | Cloud SIEM | SumoLogic Docs | ✅ | ❌ | ❌ | Vendor |
XDR
| Company | Product | Link | Enterprise API | Feed | Community | Maintained By |
|---|---|---|---|---|---|---|
| Hunters | Hunters XDR | Hunters Integrations | ✅ | ❌ | ✅ | Vendor |
SOAR
| Company | Product | Link | Enterprise API | Feed | Community API | Maintained By |
|---|---|---|---|---|---|---|
| Fortinet | FortiSOAR | FortiSOAR Connector | ✅ | ❌ | ✅ | GreyNoise |
| SecOps SOAR | SecOps SOAR Overview | ✅ | ❌ | ✅ | GreyNoise | |
| IBM | Resilient | IBM App Exchange | ✅ | ❌ | ❌ | Vendor |
| Palo Alto | XSOAR (formerly Demisto) | Cortex XSOAR Marketplace | ✅ | ✅ | ✅ | GreyNoise |
| Rapid7 | Insight Connect | Extension Library | ✅ | ❌ | ✅ | GreyNoise |
| Shuffle | Shuffle SOAR | Shuffle Greynoise API | ✅ | ❌ | ✅ | Vendor |
| Splunk | SOAR (formerly Phantom) | ✅ | ❌ | ✅ | GreyNoise | |
| SumoLogic | SOAR (IncMAN) | SumoLogic SOAR Integrations List | ✅ | ❌ | ❌ | Vendor |
| Swimlane | Swimlane | Swimlane Apphub | ✅ | ❌ | ✅ | Vendor |
| Tines | SOAR Platform | Tines Story Library | ✅ | ❌ | ✅ | Vendor |
| Torq | Torq | Torq Integrations Docs | ✅ | ❌ | ❌ | Vendor |
TIP
| Company | Product | Link | Enterprise API | Feed | Community API | Maitained By |
|---|---|---|---|---|---|---|
| Analyst1 | Analyst1 Platform | Analyst1 Integrations | ✅ | ❌ | ✅ | Vendor |
| Anomali | ThreatStream Enrichment | Anomali Marketplace | ✅ | ✅ | ✅ | GreyNoise |
| Cyware | CTIX | Cyware Orchestration integration Cyware Feed Integration | ✅ | ❌ | Vendor | |
| EclecticIQ | EclecticIQ Intelligence Center | EclecticIQ Integration | ✅ | ✅ | ✅ | Vendor |
| MISP | MISP | MISP Github | ✅ | ✅ | ✅ | GreyNoise |
| OpenCTI | Connector | OpenCTI Github | ✅ | ✅ | ❌ | GreyNoise |
| Recorded Future | SIP | Recorded Future Integrations | ✅ | ❌ | ❌ | GreyNoise |
| ThreatConnect | TIP | ThreatConnect Marketplace | ✅ | ✅ | ❌ | Vendor |
| ThreatQ | TIP | ThreatQ MarketPlace | ✅ | ✅ | ✅ | Vendor |
| Vertex | Synapse | ✅ | ❌ | ✅ | Vendor |
Firewall
| Company | Product | Link | Blocklist Support | Maintained By |
|---|---|---|---|---|
| Sophos | Third-Party Feeds | Sophos Documentation | ✅ | Vendor |
Other
| Company | Product | Link | Enterprise API | Community API | Maintained By |
|---|---|---|---|---|---|
| Arctic Security | Arctic Security | Arctic Security | ✅ | ❌ | Vendor |
| Axonius | Cybersecurity Asset Management | Axonius Docs | ✅ | ❌ | Vendor |
| Arkime | Cont3xt | Cont3xt | ❌ | ✅ | Vendor |
| Cribl | Stream | Cribl Packs | ✅ | ❌ | GreyNoise |
| Datadog | Worfklow Automation | Actions Catalog | ✅ | ❌ | Vendor |
| ZScaler | Deception | ZScaler Deception Docs | ✅ | ❌ | Vendor |
Analyst Tools / OSINT
| Company | Product | Link | Enterprise API | Community API | Maintained By |
|---|---|---|---|---|---|
| Gigasheet | Gigasheet | Gigasheet | ✅ | ❌ | Vendor |
| Harpoon | CLI Tool | Harpoon Github | ✅ | ✅ | Vendor |
| The Hive | Cortex Analyzer | TheHive Github | ✅ | ❌ | GreyNoise Contributes |
| Maltego | Maltego | Transform Hub | ✅ | ✅ | GreyNoise |
| Outcome Security | Kaleidoscope | Kaleidoscope | ✅ | ✅ | Vendor |
| Polarity | Polarity | Polarity GitHub | ✅ | ✅ | Vendor |
| pOSINT | pOSINT | pOSINT Github | ✅ | ❌ | Vendor |
| Spiderfoot | Spiderfoot | Spiderfoot GH | ✅ | ✅ | GreyNoise Contributes |
| Sputnik | Browser Extension | Sputnik GitHub | Uses GreyNoise Visualizer Only | Uses GreyNoise Visualizer Only | Vendor |
Other Community Contributed Integrations
| Author | Product | Link | Enterprise API | Community API |
|---|---|---|---|---|
| Cowrie | Cowrie | Cowrie GitHub | ❌ | ✅ |
| CyberGordon | CyberGordon | CyberGordon | ❌ | ✅ |
| AndrewPla | GreyNoisePS | GreyNoisePS GitHub | ✅ | ✅ |
| hrbrmstr | GreyWatch | GreyWatch GitHub | ❌ | ✅ |
| IntelOwl | IntelOwl | IntelOwl GitHub | ✅ | ✅ |
| matamorphosis | Scrummage | Scrummage GitHub | ❌ | ✅ |
| HurricaneLabs | Machinae | HL Github | ❌ | ✅ |
| Sage | Canary-GreyNoise-Community-Threat-Intel-Report via Thinkst | Thinkst Canary GH | ❌ | ✅ |
| Sage | Canary-GreyNoise-Enterprise-Threat-Intel-Report via Thinkst | Thinkst Canary GH | ✅ | ❌ |
| Ninoseki | Mihari | Ninoseki Github | ✅ | ❌ |
| Ninoseki | Mitaka | Ninoseki Github | ✅ | ✅ |
| ThreatDudes | GreyNoise Discord Alerts | ThreatDudes Github | ✅ | ❌ |
| Backchannel Inc. | GreyNoise Cloudflare Worker | Backchannelinc Github | ❌ | ✅ |
| Brex HQ | Substation | Substation Docs | ✅ | ✅ |
Updated about 1 month ago
