All integrations
Huntbase connects to 157 products. Each page below covers what to create in the vendor's console, what to enter on the Connect step of New connection, and which query languages the connection serves once it's healthy.
For how connections work in general — owners, health, credentials, several connections to one product — start with Connections.
By query language
Every connection serves Auto, where Scout picks the language for you. Beyond that:
| Language | Integrations |
|---|---|
| SQLite | 117 |
| STIX | 42 |
| KQL | 3 |
| osquery | 2 |
| SPL | 1 |
| ES Query DSL | 1 |
| ES|QL | 1 |
| AQL | 1 |
| MySQL | 1 |
| Cypher | 1 |
AI & ML
| Integration | Sign-in | Query languages |
|---|---|---|
| Cohere | API Key | SQLite |
| OpenAI | API Key | SQLite |
CDN
| Integration | Sign-in | Query languages |
|---|---|---|
| Cloudflare | API Token or Legacy API Key, R2 Access Keys | SQLite |
| Fastly | Fastly API Token | SQLite |
Cloud
| Integration | Sign-in | Query languages |
|---|---|---|
| Alibaba Cloud | Static Credentials, Named Profile | SQLite |
| AWS | AWS Access Keys/Secret Keys | SQLite |
| Azure | Client Secret, Resource Owner Password Authentication | SQLite |
| DigitalOcean | Personal Access Token | SQLite |
| Equinix | API Token | SQLite |
| Fly.io | Fly.io API Token | SQLite |
| GCP | GCP Credentials | SQLite |
| Heroku | API Key | SQLite |
| Hetzner Cloud | API Token | SQLite |
| Linode | API Token | SQLite |
| Openstack | Keystone Username/Password | SQLite |
| Oracle Cloud Infrastructure | OCI API Key, OCI Config File Profile | SQLite |
| OVH Cloud | OVH API Application Credentials | SQLite |
| SAP BTP | Username and Password, CIS Service Key, OAuth Client Credentials, Access Token | SQLite |
| Scaleway | API Key | SQLite |
| Scalingo | API Token | SQLite |
| Vercel | API Token | SQLite |
| VMWare vSphere | Username and Password | SQLite |
Collaboration
| Integration | Sign-in | Query languages |
|---|---|---|
| Atlassian Confluence | Cloud (Email + API Token), Data Center (Personal Access Token) | SQLite |
| Google Workspace | Service Account (Domain-Wide Delegation), OAuth 2.0 Client | SQLite |
| Microsoft 365 | Client Secret, Client Certificate, Managed Identity / Azure CLI | SQLite |
| Slack | Slack App Token | SQLite |
| Zoom | Server-to-Server OAuth, SDK/JWT App | SQLite |
Containers
| Integration | Sign-in | Query languages |
|---|---|---|
| Consul | ACL Token | SQLite |
| Docker | Local Docker Engine, Docker Engine TLS | SQLite |
| Kubernetes | Kubeconfig File, In-Cluster Service Account | SQLite |
| Nomad | ACL Token | SQLite |
| Red Hat Openshift | Kubeconfig File | SQLite |
Data warehouse
| Integration | Sign-in | Query languages |
|---|---|---|
| Amazon Athena | AWS IAM | STIX |
| Apache Iceberg | Static Access Keys | SQLite |
| Databricks | Personal Access Token, OAuth Service Principal, Basic Authentication, Databricks CLI Config File | SQLite |
| Snowflake | Username & Password, Key Pair Authentication, OAuth Token | SQLite |
Database
| Integration | Sign-in | Query languages |
|---|---|---|
| Aiven | API Token, User Credentials | SQLite |
| Elastic | No Authentication, API Key, Username / Password, API Token (Bearer) | STIX, ES Query DSL, ES|QL |
| MongoDB | API Key | SQLite |
| MySQL | None | STIX, MySQL |
| Neo4j | None | Cypher |
| Planetscale | Access Token | SQLite |
| Supabase | Personal Access Token | SQLite |
Device management
| Integration | Sign-in | Query languages |
|---|---|---|
| Fleet | None | osquery |
| HCL BigFix | Username and Password | STIX, SQLite |
| Huntbase Endpoint Control | None | osquery |
| Kolide | API Token | SQLite |
| OSCtrl | None | SQLite |
DNS & domains
| Integration | Sign-in | Query languages |
|---|---|---|
| Gandi | Personal Access Token | SQLite |
| GoDaddy | API Key & Secret | SQLite |
| Namecheap | API Key | SQLite |
EDR
| Integration | Sign-in | Query languages |
|---|---|---|
| Broadcom Carbon Black | API Key | STIX |
| Broadcom CarbonBlack Cloud | API Key | STIX |
| Crowdstrike Falcon | CrowdStrike Falcon API Credentials | SQLite, STIX |
| Cybereason | None | STIX |
| IBM QRadar EDR | None | STIX |
| Microsoft Defender for Endpoint | Client Secret (Azure AD App) | STIX, KQL |
| SentinelOne | API Token | STIX |
| Symantec Endpoint Security | OAuth Credentials | STIX |
| Tanium | None | STIX |
| Trellix HX | Username and Password | STIX |
| Trend Micro | API Token | STIX |
Email security
| Integration | Sign-in | Query languages |
|---|---|---|
| Cisco Secure Mail | Username and Password | STIX |
| Proofpoint | API Key | STIX |
File storage
| Integration | Sign-in | Query languages |
|---|---|---|
| Microsoft Azure Blob Storage | Client Secret, Shared Access Signature (SAS), Account Key | SQLite |
GRC
| Integration | Sign-in | Query languages |
|---|---|---|
| Vanta | OAuth Client Credentials, Access Token | SQLite |
Identity
| Integration | Sign-in | Query languages |
|---|---|---|
| auth0 | Management API Token, Client ID and Client Secret | SQLite |
| Azure AD | Client Secret | SQLite |
| DUO | Duo Admin API | SQLite |
| Google Directory | Service Account (Domain-Wide Delegation), OAuth 2.0 Client Secret | SQLite |
| JumpCloud | Admin API Key | SQLite |
| KeyCloak | Admin User | SQLite |
| OKTA | API Token, OAuth Client Credentials (Private Key) | SQLite, STIX |
| OneLogin | None | STIX |
| WorkOS | WorkOS API Key | SQLite |
Infrastructure as code
| Integration | Sign-in | Query languages |
|---|---|---|
| Ansible | No Authentication | SQLite |
| AWS CloudFormation | No Authentication | SQLite |
| Env0 | API Key and Secret | SQLite |
| Hashicorp Terraform | API Token | SQLite |
| Hashicorp Terraform File | No Authentication | SQLite |
IT service management
| Integration | Sign-in | Query languages |
|---|---|---|
| Atlassian Jira | Email and API Token, Personal Access Token | SQLite |
| ClickUp | API Token | SQLite |
| Freshworks Freshservice | API Token | SQLite |
| Linear | API Token | SQLite |
| ServiceNow | Username and Password, OAuth2 Client Credentials | SQLite |
| Trello | API Key and Token | SQLite |
| Zendesk | API Token | SQLite |
NDR
| Integration | Sign-in | Query languages |
|---|---|---|
| Darktrace | API Token Pair | STIX |
| Vectra | None | STIX |
Network security
| Integration | Sign-in | Query languages |
|---|---|---|
| Baleen | Personal Access Token | SQLite |
| Palo Alto Networks PANOS | API Key, Username and Password | SQLite |
| Tailscale | API Key | SQLite |
Observability
| Integration | Sign-in | Query languages |
|---|---|---|
| AWS CloudWatch Logs | AWS IAM | STIX |
| Datadog | API and Application Keys | STIX, SQLite |
| Freshworks Freshping | API Key | SQLite |
| Grafana | API Key, Basic Authentication | SQLite |
| Microsoft Azure Log Analytics | Azure AD Application (Service Principal) | STIX, KQL |
| new relic | New Relic API Key | SQLite |
| Prometheus | No Authentication | SQLite |
| Sentry | Auth Token | SQLite |
| UpDown | API Key | SQLite |
| UptimeRobot | API Key | SQLite |
On-call
| Integration | Sign-in | Query languages |
|---|---|---|
| Atlassian Opsgenie | API Token | SQLite |
| PagerDuty | API Token | SQLite |
Other
| Integration | Sign-in | Query languages |
|---|---|---|
| Hubspot | Private App Token | SQLite |
| Nozami Networks | API Key | STIX |
| Reddit OAuth2 (Script App) | SQLite | |
| Salesforce | Username, Password & Security Token | SQLite |
| SAP | OAuth Client Credentials | SQLite |
| Solace | API Token | SQLite |
Secrets management
| Integration | Sign-in | Query languages |
|---|---|---|
| 1Password | Connect Token | SQLite |
| AKEYLESS | API Key, JWT, AWS IAM, Azure AD, GCP | SQLite |
| Doppler | Doppler Token | SQLite |
| GitGuardian | Personal Access Token | SQLite |
| Hashicorp Vault | Vault Token, AWS Auth | SQLite |
| IBM Security Privilage Vault | None | STIX |
| IBM Security Verify | Client Secret | STIX |
SIEM
| Integration | Sign-in | Query languages |
|---|---|---|
| Cisco Splunk | Username and Password, Authentication Token | SQLite, STIX, SPL |
| Crowdstrike Logscale | API Token | STIX |
| GCP Chronicle | GCP Service Account | STIX |
| IBM QRadar | None | STIX, AQL |
| Micro Focus Arcsight | None | STIX |
| Microsoft Azure Sentinel | Client Secret (Azure AD App), OAuth Access Token | STIX, KQL |
| Sumologic Sumologic | None | STIX |
SOAR
| Integration | Sign-in | Query languages |
|---|---|---|
| Palo Alto Networks Cortex XDR | API Key | STIX, SQLite |
Source control & CI/CD
| Integration | Sign-in | Query languages |
|---|---|---|
| Atlassian Bitbucket | Username and App Password | SQLite |
| Azure DevOps | Personal Access Token | SQLite |
| BuildKite | API Token | SQLite |
| CircleCI | API Token | SQLite |
| Github | Access Token | SQLite |
| Gitlab | Access Token | SQLite |
| Jenkins | Username and Password/API Token | SQLite |
Threat intelligence
| Integration | Sign-in | Query languages |
|---|---|---|
| AbuseIPDB | API Key | SQLite |
| Crt.sh | No Authentication | SQLite |
| HaveIBeenPwned | HIBP API Key | SQLite |
| Hudson Rock | No Authentication | SQLite |
| Infoblox | API Key | STIX |
| ip2location | API Key | SQLite |
| IPinfo | No Authentication, IPinfo Access Token | SQLite |
| ipstack | API Token | SQLite |
| Reversinglabs | Username and Password | STIX |
| Shodan | Shodan API Key | SQLite |
| TAXII 2.1 Feed | No Authentication, Basic Auth, Bearer Token | — |
| URLScan | API Key | SQLite |
| VirusTotal | API Key | SQLite |
| Whois | No Authentication | SQLite |
Vulnerability management
| Integration | Sign-in | Query languages |
|---|---|---|
| AWS GuardDuty | AWS IAM Credentials | STIX |
| Detectify | API Token & Secret | SQLite |
| IBM Cloud Security Advisor | API Key | STIX |
| IBM Guardium Data Protection | Username & Password | STIX |
| Palo Alto Network Prisma Cloud | Access Key, JSON Web Token | SQLite |
| Redhat Advanced Cluster Security | API Token | STIX |
| SemGrep | API Token | SQLite |
| Sysdig | API Token | STIX |
| Trivy | No Authentication | SQLite |
| Turbot Guardrails | Access Key and Secret Key, Turbot Profile | SQLite |
| Wiz | Service Account | SQLite |
Next steps
- Connections — create and manage a connection
- Data lake — send telemetry to Huntbase or bring your own lake
- Query languages — every language in one place