INTEGRATIONS

Our products work with the tools you already have.

Every product comes with native integrations for cloud, ticketing, and alerts. To connect your company's other security tools, such as scanners, EDR, CSPM, and SIEM, there is the Unified Integration Fabric (UIF) add-on.

NATIVE INTEGRATIONS

What comes with each product

No extra cost and no add-on. You connect them from the product console.

CSURFACE

Cloud

AWSAzureGoogle CloudOracle Cloud

WAF and CDN

CloudflareAkamaiImpervaAzionGoCacheAWS WAFAzure WAFCloud ArmorOracle WAF

Ticketing

JiraJira Service ManagementServiceNow

Alerts and SIEM

EmailWebhookSlackMicrosoft TeamsTelegramWazuh

Development

APIWebhooks
CSURFACE integrations →
BeforeTHEM

Ticketing, with status sync back

JiraJira Service ManagementServiceNow

Alerts and SIEM

EmailWebhookSlackWazuh

Single sign-on

Microsoft Entra IDOIDC

Scheduled reports can also go out by email or webhook.

BeforeTHEM integrations →
CAASM

CAASM builds its inventory from your company's tools, so UIF comes included. Every integration in the catalog below is part of CAASM, with no per-connector cost.

Also included, no connector needed

CSURFACEBeforeTHEM

ADD-ON · UNIFIED INTEGRATION FABRIC

UIF: your security tools connected to our products

The Unified Integration Fabric (UIF) is the CSURFACE integrations add-on. It connects security tools from other vendors to our products in both directions. Their data comes in to enrich the analysis, and our findings go out to wherever your team works.

Inbound

Data from your tools

Vulnerability scanners, EDR, CSPM, identity, PAM, patch management, BAS, and threat intelligence start feeding the product you use.

Outbound

Findings in the right place

More ticketing tools, such as Zendesk, Freshservice, and ServiceDesk Plus, and more SIEMs, such as Splunk, Google SecOps, and Microsoft Sentinel.

Licensing

An add-on for any product

Add it to CSURFACE or BeforeTHEM. With CAASM, UIF is already included.

Connect

Pick the tool in the console and enter a read-only credential. It is stored in an encrypted vault and never appears in logs or the API.

Standardize

UIF translates what each tool reports into a common format, records the source and date of every data point, and keeps one source from overwriting another.

Use

The data shows up in the product you use, and findings go to the destinations you set up. Nothing changes in your tools without your permission.

With UIFWhat you get
CSURFACEScanners, CSPM, and EDR enrich the external view. An exposed asset shows up with its internal vulnerabilities, its cloud configuration, and the protection it has. Findings reach more ticketing and SIEM tools.
BeforeTHEMInternal network findings reach more ticketing and SIEM tools. To combine BeforeTHEM with Tenable, EDR, and CMDB in a single inventory, use CAASM.
CAASMAlready included. Every integration in the catalog feeds the unified inventory.

UIF CATALOG

Tools UIF connects

FREQUENTLY ASKED QUESTIONS

FAQ

What is UIF?

UIF stands for Unified Integration Fabric. It is the CSURFACE integrations add-on. It connects security tools from other vendors to our products, so their data comes in and our findings reach them.

Do I need UIF to use CSURFACE or BeforeTHEM?

No. Both work on their own and include native integrations for cloud, ticketing, and alerts. UIF comes in when you want to connect other security tools.

Is UIF included with CAASM?

Yes. CAASM builds its inventory from your tools, so the integrations come with it, with no per-connector cost.

Does UIF change anything in my tools?

By default, access is read-only. Actions that write to a tool, such as opening a ticket, only happen when you configure them.

The tool I use is not on the list. What now?

Talk to us. The catalog grows based on what our customers use.

Which tools does your company use?

Tell us. We will show you what comes with each product and what UIF adds in your case.