Apps

The ThreatConnect Marketplace is your one-stop-shop to browse all available ThreatConnect Apps and Playbook Templates.

Devo

With the Devo integration, customers have the ability to query their Devo instance

Elastic Security

With the Elastic Security integration users are able to utilize Kibana SIEM threat detection features with endpoint prevention...

ElasticSearch

With the Elasticsearch Playbook app and Service app, you can execute a search query and get back search hits that match the...

LogRhythm SIEM

Retrieve and manage LogRhythm alerts in ThreatConnect with a Service App and Playbook App.

LogRhythm Smart Response Plugin

ThreatConnect and LogRhythm have partnered to enable users to detect and act on ThreatConnect intelligence in LogRhythm.

Microsoft Azure Sentinel

With the Microsoft Azure Sentinel apps, you can better manage and ingest Incidents and Alerts in Azure Sentinel.

Micro Focus ArcSight ESM-CEF

With this Playbook and Job App, you can deploy Indicators and logs from Micro Focus ArcSight ESM to ThreatConnect using the...

Amazon GuardDuty

With these Amazon GuardDuty apps, you can easily set up monitoring and alerting for any known IP addresses (both good and...

Splunk Enterprise

ThreatConnect provides the ability to aggregate threat intelligence from multiple sources (i.e., open source, commercial,...

RSA NetWitness Endpoint

The RSA NetWitness Platform - Endpoint Playbook app enables automated investigation and response actions on hosts with the...

RSA NetWitness Platform

ThreatConnect and RSA have partnered to enable users to detect and act on ThreatConnect intelligence in the RSA Netwitness...

Sigma

With this Playbook app, convert your SIEM Signatures to Sigma Signatures, a generic and open signature format that allows...

Sumo Logic

The integration between Sumo Logic and ThreatConnect enables users to automate searches for events in Sumo Logic.

Micro Focus ArcSight ESM-API

The ThreatConnect ArcSight ESM integration provides ArcSight users the ability to leverage customizable threat intelligence...

IBM QRadar SIEM

The ThreatConnect integration with QRadar enables sending validated and actionable intelligence between the ThreatConnect...

App Store Screen

List Your App in our App Store

Register as an app developer and submit your app easily with our App Store Developer Portal

Get Started as an App Developer