Se integra con la tecnología que ya usas.
EDR, SIEM, firewall, identidad, correo, cloud, ticketing y fuentes de inteligencia. Ciberia trabaja sobre tus herramientas, sin sustituirlas.
777 integraciones disponibles
CrowdStrike Falcon
SentinelOne
Microsoft Defender for Endpoint
Microsoft Defender XDR
Microsoft Sentinel
Microsoft Entra ID
Microsoft Entra ID Protection
Mimecast
PAN-OS
Cortex XDR
Okta
AWS GuardDuty
AWS CloudTrail
Google Cloud SCC
Cisco Firepower
Darktrace
KELA RaDark
SpyCloud
Intel 471 Feed
Abnormal Security
Absolute
AbuseIPDB
Acalvio ShadowPlex
Accenture CTI Feed
Accenture CTI
Active Directory Query
Admin By Request
Aella Starlight
Agari Phishing Defense
Akamai SIEM
Akamai WAF
AlgoSec
AlienVault OTX
AlienVault USM Anywhere
AlphaSOC Network Behavior Analytics
AlphaSOC Wisdom
Cisco Secure Endpoint (AMP)
Anomali Enterprise
Anomali ThreatStream
Anomali Security Analytics Alerts
Anomali ThreatStream Feed
ANY.RUN
APIVoid
AppNovi
Arcanna
RSA Archer
ArcSight ESM
ArcSight Logger
ArcusTeam
ARIA Packet Intelligence
Arkime
Armis
Armorblox
Asana
Asimily Insight
Ataya
Atlassian Confluence Cloud
Atlassian Jira Service Management
AttackIQ FireDrill
Attivo BOTsink
Atlassian
Augur Security
AutoFocus
Automox
Awake Security
AWS DynamoDB
AWS Systems Manager
AWS WAF
AWS Access Analyzer
AWS ACM
AWS Athena
AWS CloudWatch Logs
AWS EC2
AWS EKS
AWS Enrichment and Remediation
AWS IAM
AWS IAM Identity Center
AWS Identity Lifecycle Management
AWS Lambda
AWS Network Firewall
AWS Organizations
AWS Route 53
AWS S3
AWS Secrets Manager
AWS Security Hub
AWS Security Lake
AWS SNS
AWS SQS
Axonius
Azure Compute
Azure Data Explorer
Azure DevOps
Azure Firewall
Azure Key Vault
Azure Kubernetes Services
Azure Log Analytics
Azure Network Security Groups
Azure Resource Graph
Microsoft Defender for Cloud
Azure SQL Management
Azure Storage
Azure Storage Container
Azure Storage File Share
Azure Storage Queue
Azure Storage Table
Azure WAF
Barracuda
Bastille Networks
BeyondTrust Password Safe
BeyondTrust Authorization Requests
HCL BigFix
Binalyze
Bitbucket
Bitcoin Abuse
BitDam
BitSight
BlueCat Address Manager
Blueliv
Blueliv Threat Compass
Blueliv Threat Context
BMC Discovery
BMC Helix Remedyforce
BMC Helix ITSM
Box
Palo Alto Networks BPA
Brandefense
BreachRx
C2Sec
Cado Response
Carbon Black Live Response
Carbon Black Enterprise Response
Carbon Black Defense
Carbon Black Enterprise EDR
Carbon Black Protect
Censys
Centreon
Centrify Vault
CertStream
CheckPhish
Check Point Dome9
Check Point Firewall
Check Point Harmony Endpoint
Check Point HEC
Check Point NDR
Check Point SandBlast
Check Point XDR
Cherwell
CimTrak
CIRCL
CircleCI
CIRCL Hashlookup
Cisco ISE
Cisco Meraki
Cisco Umbrella Cloud Security
Cisco Umbrella Enforcement
Cisco Umbrella
Cisco ASA
Cisco Secure Email (IronPort)
Cisco SMA
Cisco Webex
Cisco Stealthwatch
Cisco Umbrella Reporting
Cisco Webex Feed
Cisco WSA
Claroty
Claroty xDome
ClickSend
Cloaken
Cloudflare WAF
Cisco Cloudlock
CloudShare
CloudShark
Code42
Cofense Intelligence
Cofense Triage
Cofense Vision
Cognni
Cohesity Helios
Commvault Security IQ
Computer Vision Engine
Concentric AI
Confluence
Confluera
Coralogix
Cortex 911
Cortex Data Lake
Cortex Xpanse
CounterCraft
CounterTack
CrowdSec
CrowdStrike Falcon Sandbox
CrowdStrike Falcon X
CrowdStrike Intel
CrowdStrike Malquery
Cryptosim
CSC Domain Manager
Cyware CTIX
CTM360 Cyber Blindspot
Cuckoo Sandbox
CVE Search
CybelAngel
CyberArk AIM
CyberArk PAS
CyberChef
Cybereason
Cyberint
Cyberpion
Cybersixgill Actionable Alerts
Cybersixgill DVE
CyberTotal
Cyber Triage
Cyberwatch
CyberX Central Manager
Cyble Events
Cyble Threat Intel
CyCognito
CylancePROTECT
Cymptom
Cymulate
Cyren Inbox Security
Darktrace ASM
DataBee
Datadog Cloud SIEM
Dataminr Pulse
DB2
DeCYFIR
Deep Instinct
DeHashed
Delinea DevOps Secrets Vault
Delinea Secret Server
Devo
DevSecOps
Digital Defense Frontline VM
Digital Guardian
Digital Shadows
Discord
DNSDB
DNS over HTTPS
dnstwist
DomainTools Iris
DomainTools
DomainTools Iris Detect
Doppel
Dragos Worldview
Drift
Druva
DSPM
Cisco Duo
EasyVista
EclecticIQ
Edgescan
Elasticsearch
Email Hippo
EmailRep.io
Endace
Envoy
McAfee ePO
EUVD
Microsoft Exchange (EWS)
Exabeam
Exabeam Data Lake
Exabeam Security Operations Platform
Exodus Intelligence
Expanse
Exterro
ExtraHop
F5
F5 LTM
F5 Silverline
AlienVault Feed
AWS IP Feed
Azure IP Feed
Microsoft Entra Connect Health Feed
Bambenek Consulting Feed
Blocklist.de Feed
BruteForceBlocker Feed
Cloudflare IP Feed
Cofense Feed
Cognyte Luminar Feed
CrowdStrike Falcon Intel Feed
CyCognito Feed
Cyjax Feed
Cyren Threat InDepth Feed
DHS AIS Feed
DomainTools Feed
DShield Feed
Elasticsearch Feed
Fastly IP Feed
Feedly Feed
Feodo Tracker Feed
FireEye Feed
Google Cloud IP Feed
GitHub Feed
GreyNoise Feed
LOLBAS Feed
Majestic Million Feed
MalwareBazaar Feed
Microsoft Intune Feed
MISP Feed
MISP Threat Actors Feed- MITRE ATT&CK Feed
NVD Feed
Microsoft 365 Feed
OpenCTI Feed
ORKL Feed
Proofpoint Feed
Public DNS Feed
Recorded Future Feed
ReversingLabs Ransomware Feed
SOCRadar Threat Feed
Spamhaus Feed
abuse.ch SSL Blacklist Feed
Talos Feed
ThreatConnect Feed
ThreatFox Feed
Palo Alto Networks Threat Vault Feed
Tor Exit Nodes Feed
Unit 42 Feed
URLhaus Feed
Zero Day Live TI Fusion Feed
Zoom IP Feed
Fidelis Elevate Network
Fidelis Endpoint
FileOrbis
FireEye Detection on Demand
FireEye
FireEye CM
FireEye ETP
FireEye EX
FireEye Helix
FireEye HX
FireEye NX
FireMon Security Manager
Flashpoint
Flashpoint Feed
Forcepoint
Forcepoint Security Management Center
Forescout
Forescout eyeInspect
Fortanix DSM
FortiAuthenticator
FortiGate
FortiMail
FortiManager
FortiWeb
FortiSandbox
FortiSIEM
FraudWatch
Freshdesk
Freshworks Freshservice
FullHunt
Gamma
Gatewatcher AionIQ
Gatewatcher LIS
Google Cloud IAM
Gem
Genians
Gigamon ThreatINSIGHT
GitHub
Maltrail Feed
GitLab
GLIMPS Detect
GLPI
Gmail
Gmail Single User
Google BigQuery
Google Chat
Google Security Operations (Chronicle)
Google Cloud Compute
Google Cloud Functions
Google Cloud Logging
Google Cloud Storage
Google Dorking
Google Drive
Google Key Management Service
Google Kubernetes Engine
Google Pub/Sub
Google Resource Manager
Google Safe Browsing
Google Threat Intelligence
Google Vault
Google Cloud Vision
Gophish
Grafana
Graylog
Great Horn
GreyNoise
GRR
Google Workspace Admin
Google Workspace Auditor
Google Workspace Alert Center
Akamai Guardicore
EnCase Endpoint
Gurucul
HackerOne
Hackuity
HarfangLab EDR
HashiCorp Vault
HashiCorp Terraform
Hatching Triage
host.io
Hoxhunt
HPE Service Manager
HPE Aruba ClearPass
Hudson Rock
Humio
HYAS Insight
HYAS Protect
IBM Resilient Systems
iboss
iDefense
Recorded Future Identity
iLert
Illuminate
Illumio
Illusive Networks
Imperva Skyfence
Imperva WAF
Incapsula
Indeni
Infinipoint
InfoArmor VigilanteATI
Infoblox
Infoblox BloxOne
Infocyte
Intezer
IntSights
Inventa
IP2Location.io
IPinfo
IPQualityScore
ipstack
DFIR-IRIS
IronNet IronDefense
IronPort
Ironscales
iSIGHT
IsItPhishing
Ivanti Heat
ja3er
Jamf
JARM
Jira
Jizo
Joe Security
JSON WHOIS
Kaspersky Security Center
Keeper Secrets Manager
Kenna
Keyfactor
KnowBe4 KMSAT
KnowBe4 PhishER
Koodous
Lacework
Lansweeper
LINE Notify
Linkshadow
LogPoint SIEM
LogRhythm
Logsign SIEM
Logz.io
LockPath Keylight
Looker
Luminate
Lumu
MAC Vendors
Maltiverse
MalwareBazaar
Malwarebytes
ManageEngine PAM360
Mandiant Advantage Attack Surface Management
Mandiant Advantage Threat Intelligence
Mantis
Mattermost
MaxMind GeoIP2
McAfee Advanced Threat Defense
McAfee DXL
McAfee ESM
McAfee MAR
McAfee TIE
McAfee DAM
McAfee NSM
McAfee Web Gateway
Micro Focus SMAX
Microsoft Advanced Threat Analytics
Microsoft Defender for Cloud Apps
Microsoft Defender Threat Intelligence
Microsoft Configuration Manager
Microsoft Exchange Online
Microsoft Exchange On-Premises
Microsoft Intune
Microsoft SharePoint y OneDrive- Microsoft 365 Management Activity
Microsoft Teams
Minerva Labs Anti Evasion Platform
MISP
MITRE Caldera
MobileIron UEM
MongoDB
MS ISAC
MxToolbox
National Vulnerability Database Feed
Ncurion
Neosec
Tenable Nessus
Netcraft
NetQuest OMX
Netscout AED
Netscout Arbor Sightline
Netskope
Nexthink
NIST NVD
Nmap
Nozomi Networks
NTT Cyber Threat Sensor
Nucleon Cyber
Nutanix Hypervisor
Octox Labs
Microsoft 365 and Azure Audit Log
OpenCTI
OpenCVE
OpenLDAP
OpenPhish
Open Source Vulnerabilities
OPNsense
OpsGenie
OPSWAT MetaDefender Sandbox
OPSWAT MetaDefender
Oracle IAM
Oracle Cloud Infrastructure Feed
Orca
OTRS
PacketMail
Packetsled
PagerDuty
Palo Alto Networks Enterprise DLP
Palo Alto Networks WildFire
Palo Alto Networks IoT
PAN-OS EDL Management
Palo Alto Networks Security Advisories
Palo Alto Networks Threat Vault
Palo Alto Networks AIOps- Palo Alto Networks SLR
PAN-OS Policy Optimizer
PassiveTotal
PAT Helpdesk Advanced
Pentera
Penfield AI
Perception Point
PerimeterX
PhishLabs
PhishTank
PhishUp
Picus
Picus Automation
Picus NG Automation
Pi-hole
PingCastle
Ping Identity
Pipl
Polar Security
Polygon
PolySwarm
Postmark Spamcheck
Preempt
Prisma Access
Prisma Cloud
Prisma Cloud Compute
Prisma SaaS Security
Prometheus
Proofpoint Server Protection
Proofpoint TAP
Proofpoint Threat Protection
Proofpoint Threat Response
ProtectWise
Pulsedive- Have I Been Pwned
Qintel
IBM QRadar
QSS
Qualys
Qualys FIM
Query AI
Quest KACE
Quttera Website Malware Scanner
Rapid7 InsightIDR
Rapid7 Nexpose
Rapid7 AppSec
Rapid7 InsightVM Cloud
RDAP
Reco
Recorded Future
Recorded Future ASI
Redmine
BMC Remedy AR
BMC Remedy SR
BMC Remedy On Demand
Resecurity
Respond
ReversingLabs A1000
ReversingLabs Titanium Cloud
ReversingLabs Titanium Scale
RiskIQ Digital Footprint
RiskSense
Roksit DNS Security
RSA NetWitness
RSA NetWitness Endpoint
RSA NetWitness Packets and Logs
RSA NetWitness Security Analytics
RST Cloud
RTIR
Rubrik Polaris
Rundeck
runZero
SafeBreach
SafeNet Trusted Access
Safewalk
SailPoint IdentityIQ
SailPoint IdentityNow
Salesforce
Salesforce Fusion
Salesforce Indicators
SAP IAM
SCADAfence CNM
Screenshot Machine
SecBI
SecneurX Analysis
SecneurX Threat Feeds
Security Intelligence Services Feed
SecurityScorecard
SecurityTrails
Securonix
SEKOIA Intelligence Center
Sekoia XDR
SendGrid
Sepio- ServiceDesk Plus On-Premise
ServiceDesk Plus
ServiceNow
ShiftLeft
Shodan
Sigma
Signal Sciences
SIGNL4
Signum
Silent Push
Silverfort
Single Connect
Sixgill Darkfeed
Skyhigh Security
Slack
SlashNext Phishing Incident Response
S/MIME Messaging
Smokescreen Illusion BLACK
Snort IP Blocklist
Snowflake
SOCRadar
SOCRadar Takedown
SolarWinds
Sophos Central
Sophos XG Firewall
Spamcop
Splunk
Spur
SpyCloud Enterprise Protection
SSL Labs
Stairwell
Stamus
Stealthwatch Cloud
Stellar Cyber
Sumo Logic Cloud SIEM
Sumo Logic
Symantec Deepsight
Symantec Messaging Gateway
Symantec Blue Coat Malware Analysis
Symantec DLP
Symantec EDR
Symantec Email Security
Symantec Endpoint Protection
Symantec ICDM
Symantec Management Center
Synapse
SysAid
Sysdig
Tanium
Tanium Threat Response
Tavily
Team Cymru
Telegram
Tenable.io
Tenable.sc
Tessian
Thales CipherTrust Manager
TheHive
Thinkst Canary
ThousandEyes
ThreatConnect
ThreatExchange
Cisco Threat Grid
ThreatMiner
ThreatMon
ThreatQ
ThreatX
ThreatZone
Thycotic
Thycotic DevOps Secrets Vault
TOPdesk
Traceable
Trello
Trend Micro Apex
Trend Micro CAS
Trend Micro DDA
Trend Micro Deep Security
Trend Micro Vision One
Tripwire
TruSTAR
Trustwave SEG
Tufin
Twilio
Twinwave
IOC Hunter Feed
UBIRCH
Ultra MSG
Unisys Stealth
Unit 42 Intelligence
Unit 42 Threat Intelligence
Unshorten.me
Uptycs
URLhaus
urlscan.io
USTA
USTA v4
Varonis Data Security Platform
Varonis SaaS
Vectra AI
Vectra
Vectra XDR
Veeam
Venafi
Verodin
Versa Director
Vertica
Viper
VirusTotal
VMRay
VMware- VMware Workspace ONE UEM
VulnDB
WALLIX Bastion
What Is My Browser
Whois
Wiz
Wolken ITSM
WootCloud
Workday
IBM X-Force Exchange
xMatters
XMCO
XM Cyber
Zabbix
Zafran
Zendesk
ZeroFox
Zerohack XDR
Zimperium
Zoom
Zoom Mail
Zscaler
Seguridad de la IA
Plataformas y modelos de IA que usa tu organización.
Anthropic Claude
AnythingLLM
AWS SageMaker
DeepL
Google Gemini
Google Vertex AI
Ollama
OpenAI
Perplexity AI
¿No encuentras tu herramienta? Pregúntanos y lo revisamos contigo.
Integraciones por categoría
- Integración con cloud: AWS, Microsoft Azure y Google CloudIntegrar AWS, Microsoft Azure y Google Cloud con el SOC consiste en recoger sus registros de actividad y los hallazgos de sus servicios de seguridad (GuardDuty, Defender for Cloud, Security Command Center) para detectar credenciales robadas, recursos expuestos y abuso de la infraestructura. La respuesta habitual, según el proveedor, es desactivar credenciales, aislar instancias y cerrar accesos públicos.
- Integración con la seguridad del correo: Microsoft 365, Gmail, Proofpoint, Mimecast y másConectar la seguridad del correo con el SOC sirve para detectar lo que el filtro dejó pasar o no pudo juzgar: suplantación, fraude BEC sin adjuntos y enlaces que se vuelven maliciosos después de la entrega. La respuesta habitual, según la herramienta, es retirar el mensaje de todos los buzones, bloquear al remitente y revisar quién hizo clic.
- Integración con EDR y XDR: CrowdStrike, SentinelOne, Microsoft Defender, Cortex XDR y másConectar tu EDR o XDR a Ciberia MDR significa que agentes de IA propios investigan cada alerta en segundos, a cualquier hora, y la cruzan con correo, identidad, red y cloud. Un analista valida las decisiones con impacto y la contención se ejecuta con las acciones de la propia herramienta: aislar el equipo, terminar un proceso o poner un fichero en cuarentena. Tu EDR se queda donde está.
- Integración con firewall y red: Palo Alto Networks, Fortinet, Cisco, Zscaler, Darktrace y másIntegrar el firewall, el proxy, el DNS y el NDR con el SOC aporta lo que no ven los agentes: tráfico de equipos sin EDR, conexiones a servidores de mando y control, movimiento lateral y salidas de datos anómalas. La respuesta habitual, según la herramienta, es bloquear una IP, un dominio o una URL para toda la organización.
- Integración con identidad: Okta, Microsoft Entra ID, Active Directory y GoogleConectar tu proveedor de identidad (Okta, Microsoft Entra ID, Active Directory o Google) con el SOC permite detectar accesos anómalos, abuso de MFA y escaladas de privilegios que no generan ninguna alerta en el endpoint. La respuesta habitual, según la herramienta, es revocar las sesiones, forzar el cambio de contraseña y bloquear la cuenta mientras se investiga.
- Integración con SIEM: Splunk, Microsoft Sentinel, IBM QRadar, Elastic, Google SecOps y másIntegrar tu SIEM con Ciberia significa que sus alertas y eventos, ya sea en Splunk, Microsoft Sentinel, IBM QRadar, Elastic o Google SecOps, se revisan 24/7 y se correlacionan con la telemetría de endpoint, identidad, correo y cloud. Ciberia trabaja sobre tu SIEM sin sustituirlo: conservas tus reglas, tu retención y tus cuadros de mando.
- Integración con feeds y plataformas de threat intelligence: VirusTotal, Recorded Future, MISP, KELA y másIntegrar feeds y plataformas de threat intelligence como VirusTotal, Recorded Future, MISP, KELA, SpyCloud o Intel 471 aporta el contexto externo que tus herramientas no tienen: si una IP, un dominio o un hash es malicioso, a qué campaña o actor pertenece y si circulan credenciales tuyas. Ciberia lo combina con la inteligencia propia de Ciberia Intel.
- Integración con ticketing y colaboración: Jira, ServiceNow, BMC, Slack y Microsoft TeamsIntegrar el SOC con tu ticketing (Jira, ServiceNow, BMC) y tu chat (Slack, Microsoft Teams) sirve para que cada hallazgo llegue a quien tiene que actuar, con el contexto necesario y sin copiar datos a mano. Los playbooks abren el ticket, avisan al equipo, piden aprobación cuando hace falta y cierran el ciclo cuando la tarea termina.
Hablemos de tu seguridad.
Te enseñamos la plataforma con tu tecnología en mente y vemos qué podemos automatizar desde el primer día.
