Connect your security stack. The AI SOC does the rest

Jutsu plugs into the tools you already run: no rip-and-replace, no data migration. Stream alerts in, enrich with threat intel, and push response back out, all in hours.

Integrations
49+
Live today
23
On the roadmap
26
Categories
5

49 shown

SIEM & Log Sources

8 of 16 available now

Wazuh

Available now

Open-source security monitoring and threat detection.

Google Workspace

Available now

Gmail security, audit logs, and directory events.

Google Cloud Platform

Available now

Cloud Audit Logs for IAM, API, and resource activity.

GitHub

Available now

Secret scanning, code scanning, and repository events.

Windows host

Available now

Security, System, and Sysmon event logs.

Cloudflare

Available now

Audit log, firewall events, and Zero Trust logins.

Vercel

Available now

Team activity, deployments, and env var changes.

Railway

Available now

Workspace audit log and container access.

Splunk

Roadmap

Enterprise security analytics and search.

Microsoft Sentinel

Roadmap

Cloud-native SIEM and SOAR on Azure.

CrowdStrike

Roadmap

Endpoint detection and threat intelligence.

Elastic SIEM

Roadmap

Open-source detection and observability.

Datadog

Roadmap

Cloud security and observability signals.

Sumo Logic

Roadmap

Cloud-native log analytics and SIEM.

Graylog

Roadmap

Centralized log management and detection.

IBM QRadar

Roadmap

Enterprise SIEM offense management.

SOAR & Automation

2 of 7 available now

AgentSOAR

Available now

Jutsu's built-in SOAR engine for AWS, GCP, and Azure.

Shuffle

Available now

Open-source workflow automation, bring your own instance.

Tines

Roadmap

No-code security automation.

Splunk SOAR

Roadmap

Enterprise security orchestration platform.

Cortex XSOAR

Roadmap

Palo Alto security orchestration.

n8n

Roadmap

Open, extensible workflow automation.

Torq

Roadmap

Hyperautomation for security operations.

Threat Intelligence

9 of 11 available now

VirusTotal

Available now

Multi-engine IP and file-hash reputation scoring.

AbuseIPDB

Available now

Community abuse reports and IP confidence scoring.

AlienVault OTX

Available now

Open Threat Exchange pulses for IPs and files.

GreyNoise

Available now

Internet scanner noise vs. targeted malicious IPs.

MalwareBazaar

Available now

Malware sample metadata and signatures from abuse.ch.

Kaspersky OpenTIP

Available now

File-hash zone classification and detection names.

MISP

Available now

Correlate observables with MISP events and attributes.

CISA KEV

Available now

Known Exploited Vulnerabilities matched to alert CVEs.

IP-API

Available now

Country, ASN, and ISP context for alert IPs.

Shodan

Roadmap

Internet-exposure and open-port intelligence for IPs.

Recorded Future

Roadmap

Real-time threat intelligence and risk scores.

ITSM & Ticketing

0 of 7 available now

ServiceNow

Roadmap

IT service management and incident tracking.

Jira

Roadmap

Project and issue tracking for response work.

TheHive

Roadmap

Open-source security incident response.

Opsgenie

Roadmap

On-call alerting and incident management.

GitHub Issues

Roadmap

Track remediation as GitHub issues.

GitLab

Roadmap

Track remediation as GitLab issues.

Zendesk

Roadmap

Service tickets for security workflows.

Notifications

4 of 8 available now

Email

Available now

Alerts, incidents, cases, and scheduled reports by email.

Slack

Available now

Real-time alerts and incident updates in Slack.

Telegram

Available now

Push alerts and incidents to Telegram on the go.

PagerDuty

Available now

Trigger PagerDuty incidents for critical alerts.

Microsoft Teams

Roadmap

Alerts and incident updates in Teams channels.

Discord

Roadmap

Push alerts to Discord channels via webhook.

Mattermost

Roadmap

Self-hosted team messaging notifications.

Twilio

Roadmap

SMS alerts for critical incidents.

Questions about integrations

How long does it take to connect an integration?

Most integrations connect in minutes using your existing credentials: no agents to deploy and no data to migrate. Many teams are fully live within hours.

Do I have to move my data into Jutsu?

No. Jutsu reads from the tools you already run and pushes actions back out. Your data stays where it is, there's no rip-and-replace and no lengthy migration.

What's the difference between “Live” and “On the roadmap” integrations?

Live integrations are available in the platform today. Roadmap integrations are actively being built: tell us which one you need and we'll prioritize it.

Can you build an integration that isn't listed?

Yes. Our team ships new connectors quickly. Share what's in your stack and we'll wire it up, usually faster than you'd expect.

How does Jutsu use my connected tools?

Jutsu's AI SOC agents ingest alerts and telemetry, enrich them with threat intelligence, correlate across sources, and trigger response, with humans always in control.

Is my data secure when I connect a tool?

Connections use scoped, least-privilege credentials. Jutsu only requests the permissions an integration actually needs, and you stay in control of what's shared.

Start with the security your startup needs now

Connect your first source on the Free plan with no credit card, or book a demo to see Jutsu on your own alerts.

Start free

Subscribe to our newsletter

Get the latest security tips, product updates, and news delivered to your inbox.