Platform · Integrations
Integrate your stack.
Connect the substrate to your existing systems, tools, and services. The system of record integrates with major cloud and security tooling.
Catalog
Available integrations
Browse our extensive list of pre-built integrations or build your own with our APIs.
Akamai Security Events
Cloud-based security platform integration that protects applications and APIs from web threats including DDoS attacks, SQL injection, and credential abuse through Akamai's SIEM API.
Features
Amazon Inspector
AWS vulnerability management service integration that automatically scans AWS workloads including EC2 instances, ECR container images, and Lambda functions for software vulnerabilities and network exposure.
Features
AWS CloudTrail
Comprehensive integration with AWS CloudTrail for security and compliance monitoring.
Features
AWS CloudWatch
Seamless integration with AWS CloudWatch for monitoring and observability.
Features
AWS GuardDuty
Native integration with AWS GuardDuty for comprehensive threat detection and security monitoring.
Features
AWS Kinesis
Real-time data streaming integration with AWS Kinesis.
Features
Azure Blob Storage
Secure and scalable blob storage integration with Azure Blob Storage for log ingestion and data processing using Event Grid and Storage Queues.
Features
Azure Event Hub
High-throughput event streaming integration with Azure Event Hub for real-time data ingestion and processing.
Features
Cisco Secure Endpoint
Endpoint protection and detection platform integration with Cisco Secure Endpoint (formerly AMP for Endpoints) for comprehensive security monitoring and threat detection.
Features
Cloudflare
Cloudflare Logpush Connector for forwarding logs from Cloudflare Logpush API to DNIF, supporting multiple datasets including Zero Trust Network Session Logs, Audit logs, and Gateway logs.
Features
CloudSEK
AI-powered Digital Risk Monitoring platform integration that provides real-time visibility of cyber threats and actionable intelligence through CloudSEK's Alerts API.
Features
CrowdStrike Falcon
Captures EDR telemetry from the CrowdStrike Falcon platform, including detections, incidents, and process, network, and host activity streamed through the Falcon Event Streams and Falcon Data Replicator APIs.
Features
Duo Security
Captures authentication telemetry from Cisco Duo, including second-factor outcomes, device enrollment activity, and administrator actions retrieved from the Duo Admin API logs.
Features
Fortinet FortiGate
Captures firewall telemetry from Fortinet FortiGate appliances, including traffic sessions, UTM security events, VPN activity, and system logs delivered over syslog.
Features
GCP Activity Logs
Integration with Google Cloud Platform activity logs for security monitoring.
Features
GCP Pub/Sub
Real-time messaging and event streaming with Google Cloud Pub/Sub.
Features
GitHub Audit Log
Captures GitHub organization and enterprise audit events, covering repository changes, member and permission updates, and authentication activity from the audit log API and audit log streaming.
Features
Google Workspace
Comprehensive integration with Google Workspace services including Gmail, Drive, Calendar, and Admin SDK for security monitoring and compliance.
Features
Jumpcloud
Identity and access management integration with Jumpcloud.
Features
Kubernetes Audit Logs
Captures Kubernetes API server audit events, recording which principal performed which action on which resource across the cluster, with request and response detail at configurable audit levels.
Features
Linux Syslog
Captures syslog and auditd streams from Linux hosts, covering authentication events, process execution, kernel messages, and daemon activity over standard syslog transports.
Features
Microsoft Defender for Endpoint
Captures endpoint telemetry from Microsoft Defender for Endpoint, covering alerts and device process, file, registry, network, and logon events delivered through the streaming API.
Features
Microsoft Entra ID
Captures identity telemetry from Microsoft Entra ID, covering interactive and non-interactive sign-ins, audit events for directory changes, and Identity Protection risk detections.
Features
Microsoft Exchange Online
Security monitoring and threat detection for Microsoft Exchange Online environments.
Features
Platform features
Comprehensive integration capabilities
Powerful integration capabilities to connect with your existing systems and tools.
API integration
Seamlessly integrate with our RESTful APIs and SDKs to connect your existing systems and tools.
Cloud services
Native integration with major cloud providers and services for comprehensive platform connectivity.
Security tools
Connect with leading security tools and platforms to enhance your security operations.
Core features
Built-in integration methods
A complete set of features to handle all your integration needs.
| Feature | Description | Benefits |
|---|---|---|
| REST APIs | Comprehensive RESTful APIs with detailed documentation | Easy integration with any system or application |
| Webhooks | Real-time event notifications and data synchronization | Instant updates and automated workflows |
| SDKs | Language-specific SDKs for popular programming languages | Faster development and simplified integration |
| Cloud connectors | Native integration with major cloud providers | Seamless cloud infrastructure integration |
| Security tools | Integration with leading security platforms | Enhanced security operations and monitoring |
| Custom development | Tailored integration solutions for unique requirements | Perfect fit for your specific needs |
| Data transformation | Flexible data mapping and transformation capabilities | Seamless data flow between systems |
| Monitoring and analytics | Comprehensive integration monitoring and analytics | Visibility into integration performance and health |
- 100+
- Pre-built integrations
- 24/7
- API availability
- <100ms
- Sync latency
- Unlimited
- Custom integrations
ready to use out of the box
with 99.99% uptime
for real-time data
supported through our API
Advanced capabilities
A complete integration platform
Advanced capabilities for seamless system integration.
API-first architecture
Our API-first architecture ensures seamless integration with any system or tool. With comprehensive documentation, SDKs, and developer tools, you can quickly connect and extend our platform.
Cloud native
Built for the cloud with native support for major cloud providers. Easily connect your cloud infrastructure and services with our platform.
Security integration
Comprehensive security integrations with leading SIEM, SOAR, and security tools. Enhance your security operations with seamless data flow.
Custom development
Our expert team provides custom integration development and support. We work with you to build tailored solutions for your unique requirements.
Enterprise benefits
Why teams choose Bloo
Designed to meet the most stringent enterprise requirements while providing unmatched flexibility and ease of use.
Flexible integration
Support for multiple integration methods including APIs, webhooks, and SDKs.
Real-time sync
Real-time data synchronization and event streaming across connected systems.
Custom solutions
Custom integration development and support for unique use cases.
Frequently asked questions
Ready to connect your systems?
Get a personalized walkthrough and see how Bloo fits your environment.