ZaunDocs

Integrations

Connect your existing security tools and cloud services to Zaun.

Zaun integrates with your existing infrastructure via APIs and webhooks. Your FDSE will help you set up and configure each integration during onboarding.

Available Integrations

Cloud Providers

IntegrationTypeSetup Time
AWS (CloudTrail, GuardDuty, Config)API~30 min
Google Cloud (Audit Logs, SCC)API~30 min
Microsoft Azure (Activity Log, Defender)API~30 min

Identity Providers

IntegrationTypeSetup Time
OktaAPI~15 min
Microsoft Entra ID (Azure AD)API~15 min
Google WorkspaceAPI~15 min
OneLoginAPI~15 min
JumpCloudAPI~20 min

EDR Platforms

IntegrationTypeSetup Time
CrowdStrike FalconAPI~20 min
SentinelOneAPI~20 min
Microsoft Defender for EndpointAPI~20 min
Carbon BlackAPI~25 min

SaaS & Collaboration

IntegrationTypeSetup Time
Google Workspace (Drive, Gmail)API~15 min
Microsoft 365 (SharePoint, Teams)API~15 min
SlackAPI~10 min
GitHubAPI~10 min

Alerting & Ticketing

IntegrationTypeSetup Time
SlackWebhook~5 min
PagerDutyAPI~10 min
JiraAPI~15 min
EmailSMTP~5 min

Setting Up an Integration

Using the CLI

# Add an AWS integration
zaun integrations add aws \
  --account-id 123456789012 \
  --role-arn arn:aws:iam::123456789012:role/ZaunSecurityAudit \
  --regions us-east-1,us-west-2

# Add an Okta integration
zaun integrations add okta \
  --domain your-company.okta.com \
  --api-token $OKTA_API_TOKEN

# List all integrations
zaun integrations list

# Test an integration
zaun integrations test aws --account-id 123456789012

Using the Dashboard

  1. Navigate to Settings → Integrations
  2. Click Add Integration
  3. Select your platform and follow the setup wizard
  4. Your FDSE will verify the connection and begin building detections

Data Flow

Your Infrastructure → Zaun Integration Layer → Data Lake → Detection Engine
     (APIs)              (Normalization)        (Storage)    (Analysis)

All data is:

  • Encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Stored in your dedicated data lake instance
  • Subject to your configured retention policies
  • Accessible via the investigation console

Need Help?

Your FDSE is available to help with any integration setup. Contact them directly or email [email protected].