Skip to main content
SecurAtlas connects to your security tools to automatically pull findings, sync entity data, and map gaps to controls — without manual evidence collection.

​
Active Integrations (Available Now)

Microsoft Azure AD & M365

Users, MFA, Conditional Access, Defender, Intune, SharePoint, O365 Audit

Google Workspace

Users, Groups, 2SV enforcement, Admin accounts

​
Sub-Features (Included with Azure AD)

Microsoft Defender

Devices, alerts, CVEs, Secure Score

Microsoft Intune

Managed devices, compliance policies

​
Coming Soon

IntegrationCategoryAuthSyncs
Microsoft SentinelSIEMOAuth2Incidents, alert rules, threat indicators
Amazon Web ServicesCloudIAM RoleIAM, S3, EC2, GuardDuty, CloudTrail
Microsoft Azure (resources)CloudOAuth2VMs, NSGs, Key Vault, SQL, policies
CrowdStrike FalconEndpointOAuth2Devices, detections, vulnerabilities
OktaIdentityOAuth2Users, groups, MFA, sign-in logs
Jamf ProMDMOAuth2Devices, patch status, encryption

​
Planned

IntegrationCategory
WizCSPM
Tenable.ioVulnerability Management
Qualys VMDRVulnerability Management
Duo SecurityIdentity / MFA
SplunkSIEM
ProofpointEmail Security
MimecastEmail Security
Datto BCDRBackup
Veeam BackupBackup
VMware Carbon BlackEndpoint

​
How Integration Auth Works

Auth TypeUsed ByHow It Works
OAuth 2.0Azure AD, GWS, Defender, IntuneUser authorizes via consent screen. Tokens stored encrypted in private schema. Auto-refreshed every 6 hours.
IAM RoleAWSCross-account assume role. Read-only policy. No long-lived credentials.

​
Data Security

All integration credentials are:
  • Stored in private.integration_connection_secrets (separate private schema)
  • AES-256 encrypted via pgcrypto
  • Never exposed to other tenants
  • Accessible only via SECURITY DEFINER RPCs with tenant ownership checks
See Data Protection for full details.