Integrations | Intruex - Connect Your Security Stack

Supported Integrations

We provide out-of-the-box connectors for leading SIEMs and security platforms, with flexible options for custom data sources.

Splunk

Leverage your existing Splunk investment. Intruex ingests alerts and events from Splunk Cloud and Enterprise, providing advanced AI triage and enrichment.

Microsoft Sentinel

Enhance Microsoft Sentinel's capabilities with Intruex's AI-driven alert correlation and automated investigation playbooks.

Cribl

Connect seamlessly with your Cribl observability pipeline to route relevant security data to Intruex for intelligent processing and analysis.

IBM QRadar

Integrate Intruex with IBM QRadar to apply AI-powered analytics to your existing security events and flows, reducing noise and speeding up response.

LogRhythm

Supercharge your LogRhythm SIEM with Intruex's intelligent automation, enhancing threat detection and streamlining analyst workflows.

Elastic SIEM

Combine the power of the Elastic Stack with Intruex's AI capabilities for advanced threat hunting and automated incident response.

Threat Intelligence & Enrichment

Intruex automatically enriches every alert with real-time threat intelligence, giving your analysts the context they need without switching tools.

AbuseIPDB

IP reputation scoring and threat intelligence. Real-time lookups for source and destination IPs during alert analysis, instantly surfacing known malicious actors.

VirusTotal

File hash, URL, and domain analysis. Automated enrichment of indicators during the alert processing pipeline, correlating against 70+ antivirus engines.

WHOIS Lookups

Domain registration intelligence for investigating suspicious domains and IP ownership. Automatically uncovers registrant details, hosting providers, and domain age.

Native SOAR & Orchestration

From AI-powered analysis to automated response, Intruex closes the loop without requiring a separate SOAR platform.

Native SOAR Engine

Intruex ships with built-in orchestration that automatically executes response actions based on AI disposition. No separate SOAR license required.

Automated Response Actions

Disable accounts, reset passwords, isolate hosts, block IPs and domains — all triggered automatically by AI analysis with full audit trails.

Pluggable Architecture

Already have Palo Alto XSOAR, Splunk SOAR, or ServiceNow? Intruex feeds AI-enriched dispositions directly into your existing playbooks and workflows.

Visual Workflow Engine

Visual workflow builder for custom automation and integration scenarios. Design complex multi-step response playbooks with a drag-and-drop interface.

REST API

Full programmatic access to everything Intruex offers. Build custom integrations with any platform in your stack.

RESTful API: Complete programmatic access to alerts, incidents, dispositions, knowledge base, and more. Comprehensive OpenAPI documentation included.
API Key Authentication: Secure per-organization API keys with role-based permissions. Full audit logging of all API activity.
Webhook Support: Push real-time alert notifications and disposition updates to your systems as they happen. Configure per-event-type filters.
Unlimited Integrations: Connect Intruex to ticketing systems, chat platforms, custom dashboards, or any tool that speaks HTTP.

Get API Access

Run your own LLM on your own infrastructure

Compatible model serving for any open-source LLM

No data leaves your network — ever

Same AI-powered analysis, fully air-gapped

Bring Your Own Model

For organizations that require complete data sovereignty. Deploy Intruex with your own LLM, fully disconnected from the internet.

Perfect for Government, Defense, and classified environments where data cannot leave the network. Intruex's BYOM architecture gives you the same AI-powered alert analysis and automated triage — running entirely on your infrastructure with zero external dependencies.

Air-Gapped Ready FedRAMP Compatible IL4/IL5 Environments

Learn About BYOM

Syslog, file upload, or direct API ingestion

Custom parsers for proprietary data formats

Webhook-driven automation with any HTTP endpoint

Professional services for custom connectors

Flexible & Extensible

Don't see your specific tool listed? Intruex is designed for flexibility.

Universal Data Ingestion: Our platform can ingest data from virtually any source via syslog, file uploads, or direct API connections.
Robust API: Utilize our comprehensive API to build custom integrations and automate workflows between Intruex and your unique security ecosystem.
Professional Services: Our team can assist in developing custom parsers and connectors for your proprietary or less common tools.

Discuss Your Needs

Connect and Conquer Threats

Unify your security operations and gain unparalleled visibility. Contact us to learn more about integrating Intruex into your environment.

Contact Sales

Connect Your Entire Security Stack