Darktrace / OT integrations

Technology Integrations

We know how important it is for your security solutions to talk to each other. Darktrace was built with an open architecture, making integrations quick and simple. Find some common cases listed below. Custom integrations are available upon request.

Integrations with Darktrace/OT

Azure Sentinel

Analyze Darktrace AI Analyst incidents and model breach alerts in Azure Sentinel.

Check Point NGFW

Extend Darktrace autonomous response to Check Point firewalls.

Cisco ASA

Extend Darktrace autonomous response to Cisco firewalls.

Cisco ASA FirePOWER

Extend Darktrace autonomous response to Cisco firewalls.

Cisco FirePOWER Threat Defense

Extend Darktrace autonomous response to FirePOWER Threat Defense.

Cisco Meraki Firewall

Extend Darktrace autonomous response to Cisco Meraki firewalls.

Cortex XSOAR

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Elastic Security

Analyze, correlate, and visualize Darktrace AI Analyst incidents and model breach alerts.

Endace

Deploy and host Darktrace sensors on EndaceProbes for increased forensic evidence and storage.

FortiSOAR

Leverage custom playbooks to orchestrate actions triggered by Darktrace AI Analyst incidents and model breaches. Automate commands to pull deeper information back from Darktrace.

Fortigate Firewall

Extend Darktrace autonomous response to Fortigate firewalls.

Hunters SOC Platform

Integrate Darktrace with Hunters to allow triaging of Darktrace alerts and incidents via the Hunters console, as well as further investigating and correlating them to related threats

InsightConnect

Leverage custom playbooks to orchestrate actions triggered by Darktrace AI Analyst incidents and model breaches. Automate commands to pull deeper information back from Darktrace.

InsightIDR

Analyze Darktrace AI Analyst incidents and model breach alerts in InsightIDR.

InsightVM

Enrich Darktrace detection and response with additional device information.

Jira

Create Jira issues for AI Analyst incidents, model breaches, and system health alerts.

Juniper Networks SRX

Extend Darktrace autonomous response to Juniper firewalls.

Keysight

Capture and direct cloud or on-prem traffic with ease for Darktrace analysis.

LogRhythm

Analyze Darktrace AI Analyst incidents and model breach alerts in LogRhythm.

Microsoft Teams

Insert Darktrace alerting into Microsoft Teams channels.

Palo Alto Networks NGFW

Extend Darktrace autonomous response to Palo Alto firewalls.

QRadar

Analyze Darktrace AI Analyst incidents and model breach alerts in Qradar.

ReliaQuest

Investigate AI Analyst Incidents and Model Alerts within GreyMatter. Commands can be executed to pull back further information from Darktrace.

ServiceNow ITSM

Automate IT tasks in ITSM triggered by Darktrace alerts.

ServiceNow SecOps

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Siemplify

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Slack

Insert Darktrace alerting into a Slack channel or chat.

Splunk

Analyze Darktrace AI Analyst incidents and model breach alerts in CIM compatible Splunk dashboards, and poll Splunk data to enrich Darktrace modeling with additional contextual information.

Splunk SOAR

Leverage custom playbooks to orchestrate actions triggered by Darktrace AI Analyst incidents and model breaches. Automate commands to pull deeper information back from Darktrace.

Swimlane

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Tenable Vulnerability Management

Enrich Darktrace AI decision-making with vulnerability data from Tenable.

Tines

Leverage custom playbooks to orchestrate actions triggered by Darktrace alerts.

Xage Zero Trust Access

Enrich Darktrace modelled entities with credentials as observed by Xage