# Cato Integration Hub

Extend Cato across your IT and security stack.

Connect fast and manage everything in one place.

### Authentication

#### Categories

- [All 105](/content/integrations/authentication/#/index.html)
- [Adaptive Access 1](/content/integrations/adaptive-access/index.html)
- [AI Activity Monitoring 3](/content/integrations/ai-activity-monitoring/index.html)
- [AI Runtime Protection 6](/content/integrations/ai-runtime-protection/index.html)
- [AI Usage & Adoption 3](/content/integrations/ai-usage-adoption/index.html)
- [Asset Management 6](/content/integrations/asset-management/index.html)
- [Authentication 14](/content/integrations/authentication/index.html)
- [Cloud Security 1](/content/integrations/cloud-security/index.html)
- [Connectivity 5](/content/integrations/connectivity/index.html)
- [Data Protection 3](/content/integrations/data-protection/index.html)
- [Data Storage 3](/content/integrations/data-storage/index.html)
- [Directory Services 7](/content/integrations/directory-services/index.html)
- [EDR 4](/content/integrations/edr/index.html)
- [Experience Monitoring 5](/content/integrations/experience-monitoring/index.html)
- [IT monitoring platform 3](/content/integrations/it-monitoring-platform/index.html)
- [ITSM 3](/content/integrations/itsm/index.html)
- [MDR 5](/content/integrations/mdr/index.html)
- [Messaging 1](/content/integrations/messaging/index.html)
- [SaaS Security 16](/content/integrations/saas-security/index.html)
- [SIEM 14](/content/integrations/siem/index.html)
- [SOC Automation 2](/content/integrations/soc-automation/index.html)

### Popular integrations

\
CrowdStrike FalconCorrelate CrowdStrike Falcon endpoint detections with Cato's network telemetry](/content/integrations/edr/crowdstrike-falcon/index.html)

\
Claude PlatformProtect your homegrown AI applications and agents by enforcing policies in runtime](/content/integrations/ai-runtime-protection/claude-platform/index.html)

\
Microsoft SentinelStream Cato SASE events to Microsoft Sentinel SIEM](/content/integrations/siem/microsoft-sentinel/index.html)

### Adaptive Access

\
Adaptive AccessIntuneEnforce access policies based on Microsoft Intune device compliance](/content/integrations/adaptive-access/intune/index.html)

### AI Activity Monitoring

\
AI Activity MonitoringAnthropic Compliance APITrack user activities and pull logs of all the conversations with Claude](/content/integrations/ai-activity-monitoring/anthropic-compliance-api/index.html)

\
AI Activity MonitoringM365 Copilot APITrack user activities and pull logs of all the conversations with M365 Copilot](/content/integrations/ai-activity-monitoring/m365-copilot-api/index.html)

\
AI Activity MonitoringChatGPT Compliance APITrack user activities and pull logs of all the conversations with ChatGPT](/content/integrations/ai-activity-monitoring/chatgpt-compliance-api/index.html)

### AI Runtime Protection

\
AI Runtime ProtectionGoogle AI StudioEnforce runtime policies for homegrown AI apps on Google AI Studio](/content/integrations/ai-runtime-protection/ai-studio/index.html)

\
AI Runtime ProtectionAmazon BedrockEnforce runtime policies for homegrown AI apps on Amazon Bedrock](/content/integrations/ai-runtime-protection/bedrock/index.html)

\
AI Runtime ProtectionMicrosoft FoundryEnforce runtime policies for homegrown AI apps on Microsoft Foundry](/content/integrations/ai-runtime-protection/foundry/index.html)

\
AI Runtime ProtectionAzure OpenAIEnforce runtime policies for homegrown AI apps on Azure OpenAI](/content/integrations/ai-runtime-protection/azure-openai/index.html)

\
AI Runtime ProtectionOpenAI PlatformProtect your homegrown AI applications and agents by enforcing policies in runtime](/content/integrations/ai-runtime-protection/openai-platform/index.html)

\
AI Runtime ProtectionClaude PlatformProtect your homegrown AI applications and agents by enforcing policies in runtime](/content/integrations/ai-runtime-protection/claude-platform/index.html)

### AI Usage & Adoption

\
AI Usage & AdoptionNetskopeConsume Netskope web access logs for full AI usage visibility](/content/integrations/ai-usage-adoption/netskope/index.html)

\
AI Usage & AdoptionCortex XDRConsume Palo Alto Cortex XDR web access logs for full AI usage visibility](/content/integrations/ai-usage-adoption/cortex-xdr/index.html)

\
AI Usage & AdoptionZscaler Cloud NSSConsume Zscaler web access logs for full AI usage visibility](/content/integrations/ai-usage-adoption/zscaler-cloud-nss/index.html)

### Asset Management

\
Asset ManagementCrowdstrikeIntelligent, zero-trust device security built into the Cato SASE Cloud](/content/integrations/asset-management/crowdstrike/index.html)

\
Asset ManagementAxoniusEnrich Axonius asset inventory with Cato device, user and application data](/content/integrations/asset-management/axonius/index.html)

\
Asset ManagementArmis CentrixIntegrate Armis device data with Cato's Asset secuity service](/content/integrations/asset-management/armis-centrix/index.html)

\
Asset ManagementJuniper MistRetrieve Juniper Mist device data to enrich Cato's device inventory](/content/integrations/authentication/#/index.html)

\
Asset ManagementIntuneRetrieve Microsoft Intune device data to enrich Cato's device inventory](/content/integrations/asset-management/intune-2/index.html)

\
Asset ManagementxDOMERetrieve Claroty xDOME device data to enrich Cato's device inventory](/content/integrations/authentication/#/index.html)

### Authentication

\
AuthenticationForgeRockConfigure SSO with ForgeRock for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationKeycloakConfigure SSO with Keycloak for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationCyberArkConfigure SSO with CyberArk for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationHENNGE ONEConfigure SSO with HENNGE ONE for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationOneWelcomeConfigure SSO with OneWelcome for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationPingFederateConfigure SSO with PingFederate for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationPingOneConfigure SSO with PingOne for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationSafeNetConfigure SSO with SafeNet for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationGoogle SSOConfigure SSO with Google SSO for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationMicrosoft Entra IDConfigure SSO with Microsoft Entra ID for unified, secure enterprise authentication.](/content/integrations/authentication/#/index.html)

\
AuthenticationOktaConfigure SSO with Okta for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationDTS IdentityConfigure SSO with DTS Identity for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationJumpCloudConfigure SSO with JumpCloud for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

\
AuthenticationOneLoginConfigure SSO with OneLogin for unified, secure enterprise authentication](/content/integrations/authentication/#/index.html)

### Cloud Security

\
Cloud SecurityWizCorrelate Wiz CDR findings with Cato's network telemetry for story-driven XDR response](/content/integrations/cloud-security/wiz/index.html)

### Connectivity

\
ConnectivityAzure CloudConnect your Azure cloud tenant to the Cato Cloud](/content/integrations/authentication/#/index.html)

\
ConnectivityAWS CloudConnect your AWS cloud tenant to the Cato Cloud](/content/integrations/authentication/#/index.html)

\
ConnectivityGCPConnect your GCP cloud tenant to the Cato Cloud](/content/integrations/authentication/#/index.html)

\
ConnectivityOracleConnect your Oracle cloud tenant to the Cato Cloud](/content/integrations/authentication/#/index.html)

\
Connectivityvmware ESXiConnect your vmware ESXi cloud tenant to the Cato Cloud](/content/integrations/authentication/#/index.html)

### Data Protection

\
Data ProtectionCyera DSPMExtend XOps visibility to sensitive data across cloud, SaaS and data stores with Cyera DSPM](/content/integrations/data-protection/cyera-dspm/index.html)

\
Data ProtectionGoogle LabelsEnforce data protection policies in Cato DLP using Google labels](/content/integrations/authentication/#/index.html)

\
Data ProtectionMicrosoft AIPUse Microsoft AIP sensitivity labels in Cato DLP profiles](/content/integrations/data-protection/microsoft-aip/index.html)

### Data Storage

\
Data StorageAzure BlobGenerate an events feed directly from Cato Data Lake to Azure blob storage](/content/integrations/authentication/#/index.html)

\
Data StorageAWS S3Generate an events feed directly from Cato Datalake to AWS S3 bucket](/content/integrations/authentication/#/index.html)

\
Data StorageAWS S3 Prompts StorageStore all third-party and homegrown user AI interactions in your AWS S3](/content/integrations/authentication/#/index.html)

### Directory Services

\
Directory ServicesDTS IdentitySync DTS Identity SCIM users into Cato for user-aware access .](/content/integrations/authentication/#/index.html)

\
Directory ServicesOneWelcomeSync OneWelcome SCIM users into Cato for user-aware access](/content/integrations/authentication/#/index.html)

\
Directory ServicesJumpCloudSync JumpCloud LDAP/SCIM users into Cato for user-aware access](/content/integrations/authentication/#/index.html)

\
Directory ServicesMicrosoft Entra IDSync Microsoft Entra ID LDAP/SCIM users into Cato for user-aware access.](/content/integrations/authentication/#/index.html)

\
Directory ServicesOktaSync Okta LDAP/SCIM users into Cato for user-aware access](/content/integrations/authentication/#/index.html)

\
Directory ServicesOneLoginSync OneLogin LDAP/SCIM users into Cato for user-aware access](/content/integrations/authentication/#/index.html)

### EDR

\
EDRCrowdStrike ZTADevice Posture Check using Falcon ZTA score](/content/integrations/edr/crowdstrike-zta/index.html)

\
EDRCrowdStrike FalconCorrelate CrowdStrike Falcon endpoint detections with Cato's network telemetry](/content/integrations/edr/crowdstrike-falcon/index.html)

\
EDRMicrosoft Defender for EndpointCorrelate Microsoft Defender endpoint detections with Cato's network telemetry](/content/integrations/edr/microsoft-defender-for-endpoint/index.html)

\
EDRSentinelOneCorrelate SentinelOne endpoint detections with Cato's network telemetry](/content/integrations/authentication/#/index.html)

### Experience Monitoring

\
Experience MonitoringCisco MerakiTroubleshoot Cisco Meraki LAN and Cato WAN/LAN issues in a single Cato view](/content/integrations/authentication/#/index.html)

\
Experience MonitoringTeamsPinpoint Microsoft Teams call quality issues with Cato's network telemetry in a single DEM view](/content/integrations/authentication/#/index.html)

\
Experience MonitoringZoomPinpoint Zoom call quality issues with Cato's network telemetry in a single DEM view](/content/integrations/authentication/#/index.html)

\
Experience MonitoringWebexPinpoint Cisco Webex call quality issues with Cato's network telemetry in a single DEM view](/content/integrations/authentication/#/index.html)

\
Experience MonitoringJuniper MistTroubleshoot Juniper Mist LAN and Cato WAN/LAN issues in a single Cato view](/content/integrations/authentication/#/index.html)

### IT monitoring platform

\
IT monitoring platformZenossEnrich Zenoss service monitoring with streaming Cato's network and security events](/content/integrations/authentication/#/index.html)

\
IT monitoring platformCentreonEnrich Centreon service monitoring with streaming Cato's network and security events](/content/integrations/authentication/#/index.html)

\
IT monitoring platformLogic MonitorEnrich Logic Monitor with streaming Cato's network and security events](/content/integrations/authentication/#/index.html)

### ITSM

\
ITSMJiraCreate JIRA tickets and build automation flows based on Cato Alerts](/content/integrations/authentication/#/index.html)

\
ITSMServiceNowGenerate ServiceNow tickets and automation flows based on Cato Alerts](/content/integrations/authentication/#/index.html)

\
ITSMZendeskGenerate Zendesk tickets and automation flows based on Cato Alerts](/content/integrations/authentication/#/index.html)

### MDR

\
MDRStellar CyberStream Cato SASE events to Stellar Cyber for threat hunting](/content/integrations/mdr/stellar-cyber-2/index.html)

\
MDRSophos Taegis MDRFeed streaming Cato events into Sophos Taegis MDR for managed detection](/content/integrations/mdr/sophos-taegis-xdr/index.html)

\
MDRRapid7Feed streaming Cato events into Rapid7 MDR for enhanced SOC analysis](/content/integrations/authentication/#/index.html)

\
MDRArctic WolfFeed streaming Cato events into Arctic Wolf MDR for enhanced SOC analysis](/content/integrations/mdr/arctic-wolf/index.html)

\
MDRSecureworksFeed streaming Cato events into Sophos Secureworks MDR](/content/integrations/authentication/#/index.html)

### Messaging

\
MessagingSlackDeliver Cato alerts and notifications directly to Slack channels.](/content/integrations/authentication/#/index.html)

### SaaS Security

\
SaaS SecurityGoogle WorkspaceDeliver Google Workspace app and data security via API inspection](/content/integrations/authentication/#/index.html)

\
SaaS SecurityMicrosoft 365 AppsMonitor user activity across 200+ Microsoft 365 applications](/content/integrations/authentication/#/index.html)

\
SaaS SecurityMicrosoft ExchangeMonitor managed and unmanaged Microsoft Exchange activity via API](/content/integrations/authentication/#/index.html)

\
SaaS SecurityMicrosoft Office 365Deliver Microsoft Office 365 app, data security and threat detection via API](/content/integrations/saas-security/microsoft-office-365/index.html)

\
SaaS SecurityMicrosoft OneDriveMonitor managed and unmanaged user activity in Microsoft OneDrive via API](/content/integrations/authentication/#/index.html)

\
SaaS SecurityMicrosoft SharePointMonitor managed and unmanaged user activity in Microsoft SharePoint via API](/content/integrations/authentication/#/index.html)

\
SaaS SecurityChatGPTMonitor managed and unmanaged user activity in ChatGPT via API](/content/integrations/authentication/#/index.html)

\
SaaS SecuritySalesforceMonitor managed and unmanaged user activity in Salesforce via API](/content/integrations/authentication/#/index.html)

\
SaaS SecuritySlackDeliver Slack app, data security and threat detection via API](/content/integrations/authentication/#/index.html)

\
SaaS SecurityZendeskMonitor managed and unmanaged user activity in Zendesk via API](/content/integrations/authentication/#/index.html)

\
SaaS SecurityJiraMonitor managed and unmanaged Jira user activity via API](/content/integrations/authentication/#/index.html)

\
SaaS SecurityDropboxDeliver Dropbox app, data security and threat detection via API](/content/integrations/authentication/#/index.html)

\
SaaS SecurityBoxDeliver Box app, data security and threat detection via API](/content/integrations/authentication/#/index.html)

\
SaaS SecurityEgnyteMonitor managed and unmanaged Egnyte user activity via API](/content/integrations/authentication/#/index.html)

\
SaaS SecurityGitHubMonitor managed and unmanaged GitHub user activity via API](/content/integrations/authentication/#/index.html)

\
SaaS SecurityGoogle AppsMonitor managed and unmanaged Google Apps user activity via API](/content/integrations/authentication/#/index.html)

### SIEM

\
SIEMLevelBlueBring Cato SASE events into LevelBlue USM Anywhere for threat detection](/content/integrations/siem/levelblue/index.html)

\
SIEMDevoStream Cato SASE events to Devo for threat hunting](/content/integrations/authentication/#/index.html)

\
SIEMTarsalRoute Cato SASE telemetry to any SIEM or data lake via Tarsal](/content/integrations/authentication/#/index.html)

\
SIEMCrowdStrike Falcon NG-SIEMStream Cato SASE events to CrowdStrike Falcon NG-SIEM](/content/integrations/siem/crowdstrike-falcon-ng-siem/index.html)

\
SIEMMicrosoft SentinelStream Cato SASE events to Microsoft Sentinel SIEM](/content/integrations/siem/microsoft-sentinel/index.html)

\
SIEMSplunkStream Cato SASE events to Splunk Enterprise Security](/content/integrations/siem/splunk/index.html)

\
SIEMRapid7Stream Cato SASE events to Rapid7 InsightIDR for threat hunting](/content/integrations/authentication/#/index.html)

\
SIEMSumo LogicStream Cato SASE events to Sumo Logic Cloud SIEM](/content/integrations/siem/sumo-logic/index.html)

\
SIEMGoogle SecOpsStream Cato SASE events to Google SecOps for threat hunting](/content/integrations/authentication/#/index.html)

\
SIEMExabeamStream Cato SASE events to Exabeam](/content/integrations/siem/exabeam/index.html)

\
SIEMStellar CyberStream Cato SASE events to Stellar Cyber for threat hunting](/content/integrations/siem/stellar-cyber/index.html)

\
SIEMSekoiaStream Cato SASE events to Sekoia for threat hunting](/content/integrations/authentication/#/index.html)

\
SIEMHuntersStream Cato SASE events to Hunters for threat hunting](/content/integrations/authentication/#/index.html)

\
SIEMLumu SIEMFeed Cato SASE events into Lumu for high-confidence compromise detection](/content/integrations/authentication/#/index.html)

### SOC Automation

\
SOC AutomationDropzone AI SOC AnalystInvestigate Cato alerts automatically with the Dropzone AI SOC analyst](/content/integrations/soc-automation/dropzone-ai-soc-analyst/index.html)

\
SOC AutomationBlinkOpsBuild BlinkOps workflows that use Cato data and response capabilities](/content/integrations/soc-automation/blinkops/index.html)
