Vardion

Resources / Integrations

Integrations

Vardion sends what it finds to the tools your team already works in. Each page says exactly what is sent.

SIEM

  • Wazuh New, returning and fixed findings reach your Wazuh manager as events after each run. Vardion also reads the software inventory its agents report.
  • Splunk New, returning and fixed findings reach Splunk through its HTTP Event Collector after each run.
  • JSON and CEF New, returning and fixed findings reach the collector in front of your SIEM over HTTP after each run.

Ticketing

  • Jira Cloud Open a Jira issue from a finding or by a rule. Its status and assignee come back, and the finding closes only when a scan confirms the fix.
  • GitHub Open a GitHub issue from a finding or by a rule. Its status and assignee come back, and the finding closes only when a scan confirms the fix.

Chat

  • Slack Alerts arrive in Slack with the most severe new findings and buttons into the console.
  • Microsoft Teams Alerts arrive in Teams as cards with the most severe new findings and buttons into the console.

Threat intelligence

  • MISP Live findings reach your MISP server as a STIX 2.1 bundle, and the same bundle downloads for OpenCTI.

API and automation

  • Webhooks Each event a workspace chooses is posted to your https address, signed with HMAC-SHA256.
  • MCP An AI assistant reads findings, assets and the score through a read-only MCP server. No tool can change anything.

See it with your own tools

A demo on your domain, with the integrations you run.