Developer ToolsIntegrations
Security integrations
64 apps with 799 actions between them, including Cloudflare, 1Password, Bitwarden and CyberArk. Connect one once and any workflow can use it, built by you or by your AI.
CloudflareManage Cloudflare DNS records, cache, zone settings, IP access rules and Workers KV namespaces.25 actions
1PasswordUse 1Password in your workflows: read a secret or one-time password, find, create, update and delete items, download attached files, and watch sign-in attempts, item usage and audit events.18 actions · 4 triggersBitwardenManage Bitwarden organization members, groups and collections, and inspect policies and event logs.22 actions · 7 triggers
CyberArkRead CyberArk PAM accounts, platforms, safes, safe members, users and CPM health.8 actions · 2 triggers
CrowdStrikeInvestigate Falcon hosts, alerts, incidents and vulnerabilities, and manage host groups.25 actions · 1 trigger
WizRead cloud-security issues and projects, reopen or start work on an issue, and add or delete issue comments.6 actions · 2 triggers
Microsoft PurviewFind the email and Teams chats a public records request asks for, and export them to SharePoint once IT approves.2 actions
VirusTotalCheck files, URLs, domains and IP addresses with VirusTotal's seventy-odd antivirus engines and blocklists: get reports and verdicts, scan files and links, trace passive DNS, subdomains and the files that contact a domain or address, see what a file did in VirusTotal's sandboxes, and comment and vote with its security community.19 actions
Have I Been PwnedLook up data breaches in Have I Been Pwned: list and read breaches, filtered by site, data exposed and date, and check which breaches an email address is in.4 actions · 1 trigger
KnowBe4Report on security awareness users, groups, phishing tests and training results.24 actions
SplunkRun Splunk search jobs, read results and events, manage saved searches, inspect fired alerts, and discover indexes, apps and source types.25 actions
SnykManage Snyk's dependency and code scanning: browse Organizations, projects and the targets (repos, images and other sources) they come from, retag or re-attribute a project and read its latest issue counts, list and inspect the vulnerabilities and code issues Snyk found, and check a single package version for known vulnerabilities.12 actions
HackerOneRead programs, organizations and vulnerability reports, add comments and summaries, and update report titles and states.25 actions · 5 triggers
ShodanSearch Shodan, the search engine for Internet-connected devices: see what runs on an IP address, search and count exposed services by product, port, country or vulnerability, list a domain's subdomains and DNS records, request scans and manage Shodan Monitor network alerts.25 actions
AlienVault OTXCheck IP addresses, domains, URLs and file hashes against AlienVault OTX's community threat reports, and read and search those reports.7 actions
Google Safe BrowsingCheck whether Google considers a link dangerous before your workflow acts on it.3 actions
Pwned PasswordsCheck passwords against Have I Been Pwned's free list of passwords exposed in real data breaches.4 actions
VantaRead your Vanta compliance program, personnel, tests, vendors and event logs, and manage groups.25 actions · 1 triggerDrataRead compliance evidence, controls, frameworks, risks and audits in Drata, and manage asset inventory.25 actions · 1 trigger
Google VaultManage Google Vault eDiscovery: create and close matters, put people's Gmail, Drive, Groups, Chat and Calendar data on hold, save searches, count results and start exports.23 actions · 1 trigger
Microsoft Security Response CenterFollow Microsoft's security updates from the Security Response Center: sum up each Patch Tuesday release, list the vulnerabilities released or changed since a date, see which are exploited or were publicly disclosed, look up any CVE with the products it affects and the KB article that fixes each, and list the updates to install for a product.11 actions
Google Public DNSLook up the public records behind any domain, using Google Public DNS - the resolver at 8.8.8.8 that answers for much of the internet.8 actions
NuGetRead nuget.org, the public gallery for .NET packages, from a workflow.8 actions
MITRE ATT&CKWork with MITRE ATT&CK, the standard catalogue of how adversaries actually behave, read straight from MITRE's own TAXII server.20 actions
Go modulesKeep track of Go dependencies with the Go project's own services: search packages, see a module's versions and when each was published, find the latest, read a version's go.mod and checksums, spot retracted and deprecated versions, check a version against the Go vulnerability database, and follow new releases and new vulnerability reports as they appear.10 actions
SSL LabsTest any public HTTPS server with Qualys SSL Labs, the free TLS assessment behind ssllabs.com, and act on what it finds.12 actions
NVDSearch the US government's National Vulnerability Database, run by NIST.21 actions
CISA KEVWork with the CISA Known Exploited Vulnerabilities (KEV) catalog: the US government's authoritative list of the vulnerabilities attackers are actually exploiting.14 actions
Mozilla HTTP ObservatoryScan any website's HTTP security with Mozilla's HTTP Observatory, the scanner behind MDN's security report.12 actions
IPQualityScoreDetect fraud with IPQualityScore (IPQS): score how risky an IP address, email address, phone number, link, file or whole transaction is, spot proxies, VPNs, bots, disposable emails, VOIP numbers, phishing and malware, and check for credentials leaked on the dark web.32 actions
AbuseIPDBCheck IP addresses against AbuseIPDB, the shared database of addresses seen attacking servers: get an abuse confidence score, see who reported an address and why, check a whole network, pull the blacklist of the most-reported addresses, and report attackers yourself.7 actions
IP2Location.ioLook up where an IPv4 or IPv6 address is with IP2Location.io: the country, region, city, postcode, coordinates and UTC offset, the network it belongs to and whether it is a known proxy.1 action
Tor Exit ListTell whether an IP address is a Tor exit node, using the list the Tor Project itself publishes and rebuilds about every half hour.8 actions
SANS Internet Storm CenterUse the SANS Internet Storm Center's DShield data in workflows: look up an IP address's reputation and attack reports, track attacks on a port, rank the most attacked ports and the top attackers, read the Infocon threat level, pull open threat feeds such as known scanners, and see what web honeypots are being probed for.20 actions
MetaCPANLook up CPAN, Perl's module archive, through MetaCPAN: search modules, get a module's latest version and documentation, a distribution's releases, dependencies, the distributions that depend on it, its Changes file, contributors, ++ votes, issue counts and known security advisories, CPAN authors and their releases, who may upload a module, and what was released recently.20 actions · 2 triggers
CWELook up software and hardware weaknesses in MITRE's Common Weakness Enumeration, the catalogue that security scanners, CVE records and coding standards use to name what went wrong (CWE-79 is cross-site scripting, CWE-89 SQL injection).12 actions
URLhausCheck links, domains and files against URLhaus, abuse.ch's database of websites that spread malware: find out whether a URL is known malware and still online, what a domain or IP address has served, which files a URL dropped and which URLs served a file.8 actions
Certificate TransparencyRead the public Certificate Transparency logs from a workflow.15 actions
OSVFind out whether the software you depend on has known security vulnerabilities, using OSV, the open vulnerability database run by Google's Open Source Security Team.8 actions
endoflife.dateCheck whether the versions you run are still supported and until when, for about 500 programming languages, frameworks, databases, operating systems, cloud services and devices.8 actions · 2 triggers
OpenSSF ScorecardCheck how well an open source project is looked after with OpenSSF Scorecard, the Open Source Security Foundation's automated review of a repository's security practices.4 actions
NIST Randomness BeaconUse the random values the US National Institute of Standards and Technology publishes, so a random choice can be proved rather than trusted.7 actions
deps.devCheck open source dependencies with deps.dev, Google's Open Source Insights service.17 actions
RDAPLook up who owns a domain, an IP address or a network from a workflow, with no account and no API key.20 actions
Artifact HubFind and track cloud-native packages on Artifact Hub, the CNCF's catalogue of Helm charts, operators, OPA, Kyverno and Gatekeeper policies, Falco rules, plugins and more: search packages and repositories, read a package's versions, changelog, security scan, default values and templates, and start a workflow when a package publishes a new version.14 actions · 1 trigger
RIPEstatLook up any IP address, prefix or AS number with the RIPE NCC's public Internet data: who holds it and their abuse contact, WHOIS records, where it is registered and where it is used, how it is routed and how much of the Internet sees it, its RPKI status, its BGP neighbours and routes, its DNS names and whether it is on a spam blocklist.20 actions
EU Vulnerability DatabaseLook up vulnerabilities in the EU Vulnerability Database run by ENISA, the EU Agency for Cybersecurity.6 actions · 2 triggers
EPSSWork with EPSS, the Exploit Prediction Scoring System published by FIRST: a daily estimate, for every CVE, of how likely it is to be exploited in the wild in the next 30 days.8 actions
BinlistLook up a payment card from its first 6 to 8 digits (its BIN): the card network, debit or credit, the card brand, whether it is prepaid, the country it was issued in and the issuing bank.1 action
XposedOrNotCheck whether an email address or a password has been exposed in a known data breach, with XposedOrNot's free, open breach index.8 actions · 1 trigger
Unshorten.meFind out where short links really lead with Unshorten.me, which follows a bit.ly, t.co, TinyURL, ow.ly or other short link and reports the full address it ends up at, without anybody opening it.3 actions
FilterListsFind the filter and host lists that ad blockers, DNS blockers and firewalls subscribe to, with the free, open-source FilterLists directory: more than 2,000 lists that block ads, trackers, malware, phishing and annoyances.8 actions
PhishStatsCheck URLs, domains and IP addresses against PhishStats, a free feed of millions of phishing pages reported since 2014, each scored for risk and enriched with where it was hosted.5 actions
Sigstore RekorLook up software signatures in Sigstore's public transparency log: who signed a release, from which repository and commit, and prove the record is really there.8 actions
Vulnerability-LookupLook up vulnerabilities in CIRCL's Vulnerability-Lookup, which gathers the CVE list, NVD, GitHub and OSV advisories, vendor advisories and CERT bulletins: get any vulnerability in plain fields with its severity, EPSS score and exploited status, watch a product or source for new ones, search, browse vendors and products, and read CWEs, sightings and detection rules.20 actions · 2 triggers
ANU Quantum NumbersRandomness you can defend, from the Australian National University.5 actions
CIRCL hashlookupCheck whether a file is known with CIRCL hashlookup, the free database of billions of files from NIST's NSRL, Linux distributions, Windows builds and app stores run by Luxembourg's CERT: look up an MD5, SHA-1 or SHA-256 to get the file's name, size, product or package, trust score and malware flag, check up to 1,000 hashes at once, list the packages a file ships in and the files inside a package, and see the most looked-up hashes.6 actions
CardBinCheckLook up a payment card from its first 6 to 8 digits (its BIN or IIN): the card network, whether it is credit, debit or prepaid, the bank that issued it and the country it comes from.2 actions
HackMyIPFree lookups about IP addresses, domains and websites: where an IP address is and who runs it, whether it's on spam blocklists, a domain's DNS records, registration and email setup, whether a website is up and how good its security headers are.11 actions
ScanMalwareCheck links and websites for phishing, scams and malware with ScanMalware's free scanner.14 actions
NetworkCalcCalculate and plan IPv4 subnets, turn IP ranges into CIDR blocks, look up DNS, WHOIS and SPF records, check a site's TLS certificate expiry, and convert numbers and text between formats, with no account needed.9 actions
MailSenpai DNS CheckCheck whether a domain's email is set up right: its SPF, DKIM, DMARC and MX records, what to fix, and the exact values to publish.1 action
OpportifyCheck email addresses, IP addresses and form submissions for deliverability, risk and fraud with Opportify, one at a time or in batches with filtered exports.11 actions
FraudCoinsCheck crypto tokens for warning signs: how much of the supply the ten largest wallets hold, what the contract owner can do, and an automated risk score for 1,800+ coins.9 actions
Other categories
Automate your Security apps with Lodol.
Connect them once and ask your AI for your first workflow.
Free plan, no credit card