40+ integrations. All included.

Continuous monitoring of confirmed exploited vulnerabilities from US and EU government catalogs

Native European vulnerability database integration for NIS2 Article 12 compliance

Multi-source severity scoring with automatic failover between independent sources

Machine learning-based exploitation probability — prioritize by real-world risk, not just severity

Open-source vulnerability scanning across 7 ecosystems and 11 lockfile formats with exact version matching

Real-time patch status from major OS and software vendors (Windows, RHEL, Debian/Ubuntu)

WMI-based inventory — installed software, OS patches, browser extensions, IDE plugins

dpkg/RPM-based inventory — packages, containers, dependencies

System frameworks + Homebrew — apps, extensions, dependencies

Scan Docker container images for known vulnerabilities via Trivy

Scan Podman container images — same engine, rootless support

package-lock.json, yarn.lock, pnpm-lock.yaml

Pipfile.lock, poetry.lock

Cargo.lock

go.sum, go.mod

Gemfile.lock

composer.lock

packages.lock.json

Daily/weekly digest emails with configurable schedules and filters

Channel notifications via incoming webhooks

Channel notifications via incoming webhooks

Channel notifications via webhooks

HMAC-SHA256 signed JSON payloads to any HTTP endpoint

Create and sync issues with custom fields, priorities, and projects

Auto-create issues in your repositories with labels and assignees

Auto-create issues with labels, milestones, and confidential flags

JetBrains YouTrack issue creation

Common Event Format for ArcSight, QRadar

Structured JSON for Splunk, ELK, Datadog

Standard syslog format for any compliant receiver

LDAP bind authentication with group sync

Generic LDAP authentication and user provisioning

SSO with Okta, Azure AD, OneLogin, Keycloak, and others

Built-in two-factor authentication with any TOTP app

Sync asset inventory from Lansweeper via API

Import software inventory from PDQ

Microsoft endpoint management integration

Programmatic inventory import via authenticated API

Bulk import from spreadsheets

Scan dependencies in CI — fail builds on critical vulnerabilities

Pipeline integration with --fail-on thresholds

Plugin-free integration via CLI agent

macOS agent deployment via Jamf MDM

macOS agent deployment via Kandji

macOS agent deployment via Mosyle MDM

Windows agent deployment via Active Directory GPO