Integrations
Scripting Agent
Scripting Agent nodes use AI prompts to automatically generate and execute Python code within your workflow. Unlike regular Script nodes that require manual coding, these agents create code from natural language instructions.
Data Transformation Agent
The Data Transformation Agent Node is a specialized AI-powered component that automatically converts raw outputs into integration-ready formats. This node is specifically designed to bridge the gap between your workflow data and external integrations expected formats like Jira, Slack, or other services by intelligently mapping input data fields to target integration schemas.
Custom Agents
Run one of your saved Custom Agents — configured with its own model, provider, and tool selection on the Custom Agents page — as a step in this workflow.
AI
Prompt OpenAI and Anthropic models
Zynap Sandbox
Zynap Sandbox
Malware Intelligence
Query and search the Zynap malware intelligence database for threat intelligence, signatures, and behavioral analysis
Threat Actors Legacy
Threat Actors
Threat Actors
Threat Actors
Cybersecurity News
Cybersecurity News
Forums API
Search IOCs in different forums or sources
EASM
Zynap EASM
CVE Legacy
Zynap CVE
CVE
Zynap CVE
Credit Cards
Credit Cards
Credentials
Zynap Credentials
Canva API
Read the platform's own workflow and execution data
Wiz
Cloud security platform (CNAPP) for issues, vulnerabilities, and cloud resources
VirusTotal
VirusTotal
URLScan
URL and website scanner for suspicious and malicious URLs
SOCRadar
SOCRadar extended threat intelligence platform
Shodan
Shodan
Recorded Future
Recorded Future
Qualys VMDR
Qualys Vulnerability Management, Detection and Response — host inventory, vulnerability detections, knowledge base, scans, and reports
IBM QRadar
IBM QRadar SIEM — manage offenses, log sources, Ariel searches, assets, and saved searches
Palo Alto Prisma SASE
Palo Alto Networks Prisma SASE platform services — IAM, tenancy, subscription, SSPM, aggregate monitoring, SP interconnect, notifications, browser, and configuration orchestration
Palo Alto Prisma Cloud
Palo Alto Prisma Cloud — cloud security posture, alerts, and compliance
Palo Alto Prisma Access Browser
Prisma Access Browser Management API — manage browser users, devices, and policies
Palo Alto Prisma Access
Palo Alto Networks Prisma Access (SASE) cloud-delivered security via Strata Cloud Manager — policy, objects, profiles, identity, certificates, network setup, mobile agent, and configuration deployment
Palo Alto Cortex XSIAM
Palo Alto Cortex XSIAM — manage assets, external services, vulnerabilities, and internet exposure data
Palo Alto Cortex XDR
Palo Alto Cortex XDR — manage alerts, security events, and indicators of compromise
Palo Alto
Palo Alto Networks security platform
OpenCTI
OpenCTI
Netskope
Netskope cloud security platform
MISP
MISP
Microsoft Sentinel
Microsoft Sentinel — manage security operations, incidents, alert rules, and threat intelligence
Microsoft Security
Microsoft Security
Microsoft Entra
Microsoft Entra ID (formerly Azure AD) for identity and access management
Microsoft Defender XDR
Microsoft Defender XDR via the Microsoft Graph API — incidents, alerts, and advanced hunting
Microsoft Defender for Office 365
Microsoft Defender for Office 365 — alerts, incidents, threat submissions, Advanced Hunting, and Safe Attachments/Safe Links/Anti-Phishing policy configuration
Microsoft Defender for Endpoint
Microsoft Defender for Endpoint — manage security alerts, vulnerabilities, indicators, and endpoint response actions
JumpCloud
Directory-as-a-Service for identity and access management
IntelX
Search Tor, I2P, data leaks and the public web by email, domain, IP, CIDR, Bitcoin address and more
FortiGate
FortiGate firewall and security platform
Feedly
Feedly
Exabeam
Exabeam security analytics platform
Darkfeed
Darkfeed threat intelligence IOC feed
Cyberint
Cyberint threat intelligence and digital risk protection
CrowdStrike Vulnerability
Vulnerability Management
CrowdStrike Prevention
Prevention Policies
CrowdStrike Platform
Platform Services
CrowdStrike Intel
Threat Intelligence
CrowdStrike Identity
Identity Protection
CrowdStrike EDR
Endpoint Detection and Response
CrowdStrike Container
Container Security
CrowdStrike Compliance
Compliance Management
CrowdStrike Cloud
Cloud Security
CrowdStrike Analysis
Falcon Intelligence Analysis
Cortex XSOAR
Cortex XSOAR
Cloudflare Zero Trust
Zero Trust security platform for secure access to applications and resources
Google SecOps SOAR
Google SecOps (Chronicle) SOAR — playbooks, automation, environments, templates, and SOAR settings
Google SecOps Platform
Google SecOps (Chronicle) Platform — dashboards, data tables, exports, access control, investigations, and platform settings
Google SecOps Integrations
Google SecOps (Chronicle) SOAR integrations — connectors, actions, jobs, managers, marketplace integrations, and remote agents
Google SecOps Instances
Google SecOps (Chronicle) instance — search UDM events, find entities, and query security data
Google SecOps Events
Google SecOps (Chronicle) events, log management, and ingestion — UDM events, log types, parsers, feeds, and forwarders
Google SecOps Entities
Google SecOps (Chronicle) entities — IOCs, watchlists, threat collections, blocklists, reference lists, and enrichment
Google SecOps Detections
Google SecOps (Chronicle) detections & rules — YARA-L rules, curated rule sets, retrohunts, and findings
Google SecOps Cases
Google SecOps (Chronicle) case management — SOC cases, alerts, tasks, comments, playbooks, and SLAs
AttackIQ
AttackIQ breach and attack simulation platform
ANY.RUN
ANY.RUN
Burp Suite Enterprise
Burp Suite Enterprise Edition for DAST scanning, vulnerability management, and compliance reporting
Abuse IPDB
Abuse IPDB
MongoDB
MongoDB
FTP
File Transfer Protocol
AWS S3
AWS S3
Apify
Apify
Gitlab
Gitlab
Github
Github
Trello
Trello
Microsoft Sharepoint
Microsoft Sharepoint
Microsoft OneDrive
Microsoft OneDrive for Business — files and folders via Microsoft Graph
Jira
Jira issue tracking
InvGate Service Management
InvGate Service Management ticketing — create, update, search, and track service desk requests
Google Translate
Google Translate API for text translation services
Google Sheets
Google Sheets
Google Drive
Google Drive
Google Cloud Vision
Extract text from images and documents using Google Cloud Vision OCR
Google Calendar
Google Calendar
Dropbox
Dropbox
Telegram
Telegram messaging platform
Syslog
Send structured log messages over TLS to any RFC 5424/5425 compliant syslog server (SIEM, rsyslog, syslog-ng)
SMTP
Send emails through any SMTP-compatible mail server with support for attachments and TLS encryption
Slack
Slack messaging platform
Outlook
Microsoft Outlook services
Microsoft Teams
Microsoft Teams
Gmail
Gmail