Request a Demo

PLATFORM

Platform Overview

SIEM-less Detection

Incident Investigation

CUSTOMERS

COMPANY

Request a Demo

Works with what you already run.

No rip-and-replace. AIDR pulls from your SIEM, EDR, identity, and cloud — and pushes response actions back.

Ungated · browse freely

Pull everything. Push actions back.

Sources feed alerts and telemetry into AIDR — attack cases, response tasks, and notifications flow back to your tools

Connects to what you already run.

81 connectors · 25 built-in threat intelligence sources · SIEM · Endpoint · Identity · Cloud · Network · Email · Vulnerability · XDR

Abnormal

Alert, User

AbuseIPDB

Threat Intelligence

AlienVault OTX

Threat Intelligence

IP, Malware, URL, Vulnerability

AWS

Cloud

Alert, Dynamic Query, Endpoint, User, Vulnerability

Azure Cloud

Cloud

Alert, Dynamic Query, Endpoint, Vulnerability

Azure Data Explorer

SIEM

Dynamic Query

Bitdefender GravityZone

Endpoint

Alert, Endpoint, Vulnerability

Blocklist.de

Threat Intelligence

Cato Networks

Network

Alert, Dynamic Query, Endpoint, User

Check Point Harmony Email

Alert

Check Point Harmony Endpoint

Endpoint

Alert, Dynamic Query, Endpoint

Check Point Quantum

Network

Alert, Dynamic Query

CINS Army

Threat Intelligence

CIRCL Hashlookup

Threat Intelligence

Malware

CISA KEV

Threat Intelligence

Vulnerability

Cisco Duo

Identity

Alert, User

Cisco Meraki

Network

Alert, Endpoint

Cisco Secure Endpoint

Endpoint

Alert, Endpoint

Cisco Secure Firewall

Network

Alert, Dynamic Query, Endpoint

Cisco Umbrella

Network

Alert

Cloudflare

Network

Alert, Dynamic Query, Endpoint, User

Code42

Endpoint

Alert, Dynamic Query, Endpoint, User

Corelight

Network

Alert, Dynamic Query

Cribl

SIEM

Dynamic Query

CrowdStrike

Endpoint

Alert, Dynamic Query, Endpoint, User, Vulnerability

Cybereason

Endpoint

Alert, Endpoint

Darktrace

Network

Alert, Dynamic Query, Endpoint

Datadog Cloud SIEM

SIEM

Alert, Dynamic Query, Endpoint

DShield / SANS

Threat Intelligence

Elasticsearch

SIEM

Alert, Dynamic Query, Endpoint, Vulnerability

ESET PROTECT

Endpoint

Alert, Endpoint, User

Exabeam

SIEM

Alert, Dynamic Query

ExtraHop

Network

Alert, Dynamic Query, Endpoint, User

eyeCloudXOAR

SIEM

Alert, Dynamic Query

Feodo Tracker

Threat Intelligence

FireHOL Level 1

Threat Intelligence

FortiAnalyzer

SIEM

Alert, Dynamic Query

FortiGate

Network

Alert, Dynamic Query, Endpoint

FortiSIEM

SIEM

Alert

Google Cloud SCC

Cloud

Alert, Endpoint, Vulnerability

Google Security Operations

SIEM

Alert, Dynamic Query

Google Workspace

Identity

Alert, Endpoint, User

Gophish

User

GreyNoise

Threat Intelligence

Hunters

SIEM

Alert

Huntress

Endpoint

Alert, Endpoint

IBM QRadar

SIEM

Alert, Dynamic Query, Endpoint

Infoblox

Network

Alert, Endpoint

IPinfo

Threat Intelligence

Jamf Pro

Endpoint

Endpoint, User

MalShare

Threat Intelligence

Malware

MalwareBazaar

Threat Intelligence

Malware

Microsoft Defender

Endpoint

Alert, Dynamic Query, Endpoint, User, Vulnerability

Microsoft Entra ID

Identity

Alert, Dynamic Query, User

Microsoft Sentinel

SIEM

Alert, Dynamic Query, User

Mimecast

Alert, User

MISP

Threat Intelligence

IP, Domain, URL, Malware

Netskope

Network

Alert, Dynamic Query, Endpoint, User

NetWitness

XDR

Alert, Dynamic Query, Endpoint

NIST NVD

Threat Intelligence

Vulnerability

Okta

Identity

Alert, User

OpenPhish

Threat Intelligence

URL

OpenSearch

SIEM

Alert, Dynamic Query

Orca Security

Cloud

Alert, Dynamic Query, Endpoint, Vulnerability

Osquery

Endpoint

Dynamic Query, Endpoint

Palo Alto Cortex

XDR

Alert, Dynamic Query, Endpoint

Palo Alto Networks Firewall

Network

Alert, Dynamic Query, Endpoint

Panther

SIEM

Alert, Dynamic Query

PhishTank

Threat Intelligence

URL

PingOne

Identity

Alert, User

Prisma Cloud

Cloud

Alert, Dynamic Query, Endpoint

Proofpoint TAP

Alert

Pulsedive

Threat Intelligence

URL

Qualys VMDR

Vulnerability

Endpoint, Vulnerability

Rapid7

SIEM

Alert, Dynamic Query, Endpoint, User

RunReveal

SIEM

Alert, Dynamic Query

Scanner

SIEM

Alert, Dynamic Query

Sekoia

XDR

Alert, Dynamic Query, Endpoint

SentinelOne

Endpoint

Alert, Dynamic Query, Endpoint, User, Vulnerability

Shodan

Threat Intelligence

Silent Push

Threat Intelligence

IP, Domain

SonicWall

Network

Sophos

Endpoint

Alert, Dynamic Query, Endpoint, User

Sophos Firewall

Network

Response

Spamhaus DROP

Threat Intelligence

Splunk

SIEM

Alert, Notable Events, Dynamic Query

Stellar Cyber

XDR

Alert, Dynamic Query, Endpoint

Sublime Security

Alert

Sumo Logic

SIEM

Alert, Dynamic Query, Endpoint, User

Tenable Security Center

Vulnerability

Endpoint, Vulnerability

Tenable Vulnerability Management

Vulnerability

Endpoint, Vulnerability

TheHive

SIEM

Alert

ThreatFox

Threat Intelligence

IP, Malware, URL

Tor Exit Nodes

Threat Intelligence

Trellix ePO

Endpoint

Alert

Trend Vision One

XDR

Alert, Endpoint

Upwind

Cloud

Alert, Endpoint, Vulnerability

URLhaus

Threat Intelligence

Malware

Vectra AI

Network

Alert, Endpoint, User

Vega

SIEM

Alert

VirusTotal

Threat Intelligence

IP, Malware, URL

WAPPLES

Network

Alert

Wazuh

SIEM

Alert, Dynamic Query, Endpoint, Vulnerability

Wiz

Cloud

Alert, Endpoint, Vulnerability

Zscaler

Network

Endpoint, User

Zscaler Workflow Automation

Network

Alert

Don’t see your stack?

New connectors ship regularly — tell us what you run and we’ll confirm coverage.

Request a demo