Enrich events before they reach your SIEM. 175+ sources. Live now.
Read the blog
Read the blog

Plug in. Extract. Deliver. Integrations Made Easy.

Security data is messy. Tools generate inconsistent logs, APIs fail, and data gets stuck in silos. Monad simplifies the process by extracting, normalizing, and delivering data where it’s needed. Focus on security, we'll do the data wrangling.

Our trusted partners include

AWS LOGOCRIBLE LOGOSNOWFLAKE LOGOTENABLE LOGO

Categories

Clear all
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Inputs

AWS CloudTrail Events

Collects account activity and API usage across your AWS infrastructure for full visibility into control plane events.
Cloud Security
new
COMING SOON

AWS Cloudwatch

Ingests AWS CloudWatch Logs for security monitoring and audit trail analysis.
System Logs
new
COMING SOON

AWS Cognito Users

Fetches users from a specific user pool in AWS Cognito
Identity Security
new
COMING SOON

AWS GuardDuty

Collects security findings from AWS GuardDuty threat detection service to monitor malicious activity and unauthorized behavior across your AWS environment.
Compliance
new
COMING SOON

AWS IAM Access Analyzer

Contains information about findings from your IAM Access Analyzer.
Identity Security
new
COMING SOON

AWS Inspector

Collects vulnerability findings from Amazon Inspector v2 to monitor security issues across EC2 instances, ECR container images, and Lambda functions.
Cloud Security
new
COMING SOON

AWS KMS

Lists AWS KMS keys, aliases, and grants with detailed information
Cloud Security
new
COMING SOON

AWS Organizations

Lists AWS Organizations accounts and organizational units
Cloud Security
new
COMING SOON

AWS Resource Evaluations

Fetches a list of proactive resource evaluations.
Cloud Security
new
COMING SOON

AWS S3

Enables real-time ingestion of objects written to an S3 bucket for continuous data processing.
Cloud Security
new
COMING SOON

AWS S3 SQS

Automatically ingests new files from S3 buckets using Amazon Simple Queue Service (SQS)
Universal
new
COMING SOON

AWS SQS

Enables seamless ingestion of messages from Amazon Simple Queue Service (SQS) for data processing and integration.
Universal
new
COMING SOON

AWS Secrets Manager

Lists metadata of secrets not marked for deletion.
Cloud Security
new
COMING SOON

AWS Security Groups

Describes Security Groups from your Instances in AWS.
Cloud Security
new
COMING SOON

AWS Security Hub Findings

Ingests findings from AWS Security Hub for continuous monitoring and analysis.
Cloud Security
new
COMING SOON

Atlassian Confluence Audit Logs

Fetches audits that record activities undertaken in Confluence
SaaS
new
COMING SOON

Atlassian Jira App Roles

Fetches Jira application roles for auditing access configuration and permission mapping.
Asset Inventory
new
COMING SOON

Atlassian Jira Audit Logs

Fetches audits that record activities undertaken in Jira
SaaS
new
COMING SOON

Atlassian Jira User Directory

Returns all Jira users, including active, inactive, and previously deleted accounts.
Asset Inventory
new
COMING SOON

Backblaze B2 Cloud Storage

Enables seamless streaming of data stored in Backblaze B2 Cloud Storage buckets
Universal
new
COMING SOON

Box User Activity

Retrieves up to one year of user or enterprise activity events for audit and monitoring.
SaaS
new
COMING SOON

Box User Directory

Returns a list of enterprise users, including metadata like user ID, login, and public name.
Asset Inventory
new
COMING SOON

Buildkite Audit Logs

Retrieves audit events from your Buildkite organization for security monitoring, compliance, and operational visibility across your CI/CD pipeline activities.
System Logs
new
COMING SOON

Buildkite GraphQL

Execute custom GraphQL queries against the Buildkite GraphQL API to retrieve specific data from your Buildkite organization, including pipelines, agents, builds, teams, and other resources.
Universal
new
COMING SOON

CISA KEV Known Exploited Vulnerabilities

Fetches known exploited vulnerability data from CISA's public KEV catalog.
Vulnerability Management
new
COMING SOON

Cisco Meraki Organization Configuration Changes

Collects and ingests organization configuration changes from the Cisco Meraki Dashboard API, providing logs of configuration modifications across your Meraki organization.
System Logs
new
COMING SOON

Clumio Audit Trails

Returns a list of audit trails from your Clumio account.
Data Security
new
COMING SOON

Clumio Consolidated Alerts

Returns a list of consolidated alerts from your Clumio account.
Data Security
new
COMING SOON

Clumio Individual Alerts

Returns a list of individual alerts from your Clumio account.
Data Security
new
COMING SOON

Coda Audit Events

This source connector fetches Audit events from the Coda Admin API.
SaaS
new
COMING SOON

CrowdStrike Device Inventory

Retrieves detailed asset data on devices managed by CrowdStrike Falcon Spotlight for asset visibility and vulnerability mapping.
Asset Inventory
new
COMING SOON

CrowdStrike Event Stream

Enables real-time event streaming from CrowdStrike for continuous analysis and alerting.
Endpoint Security
new
COMING SOON

CrowdStrike Falcon Data Replicator

Ingests raw Falcon data via the Falcon Data Replicator (FDR) API for deeper analysis.
Endpoint Security
new
COMING SOON

CrowdStrike Login Activity

Fetches recent login sessions for devices to help track access and authentication behaviors.
Identity Security
new
COMING SOON

CrowdStrike Threat Actors

Fetches actor intelligence data to enhance threat correlation and investigation workflows.
Asset Inventory
new
COMING SOON

CrowdStrike User Metadata

Retrieves user metadata and activity context from CrowdStrike for identity-linked insights.
Asset Inventory
new
COMING SOON

CrowdStrike User Roles

Retrieves user role mappings within CrowdStrike to support RBAC and permission reviews.
Asset Inventory
new
COMING SOON

CrowdStrike Vulnerability Findings

Pulls vulnerability findings from CrowdStrike Spotlight Vulnerability Management.
Vulnerability Management
new
COMING SOON

CrowdStrike Vulnerability Findings Cron

Pulls vulnerability findings from CrowdStrike Spotlight Vulnerability Management.
Vulnerability Management
new
COMING SOON

Docusign Customer Event Data

Fetches customer event data from the DocuSign Monitor API.
Web Application Security
new
COMING SOON

Duo Security Activity Logs

Collects list of activity log events from Duo Security API.
Identity Security
new
COMING SOON

Duo Security Admin Activity

Fetches administrator activity logs from Duo Security for auditing changes and admin actions.
SaaS
new
COMING SOON

Duo Security Authentication Events

Collects authentication events from Duo Security for user access visibility.
Identity Security
new
COMING SOON

Duo Security Offline Enrollment Logs

Collects list of Duo Authentication for Windows Logon offline enrollment events.
Identity Security
new
COMING SOON

Duo Security Telephony Logs

Collects telephony log events from Duo Security Admin API.
Identity Security
new
COMING SOON

Endor Labs Audit Logs

Collects and ingests audit logs from Endor Labs, providing comprehensive visibility into user activities, system operations, and security events within your Endor Labs organization.
System Logs
new
COMING SOON

Figma Activity Logs

Ingests Figma organization activity logs tracking user actions, file access, team changes, and admin events for security and compliance purposes.
System Logs
new
COMING SOON

FleetDM Fleet Activities

Collects activity logs from your FleetDM instance
SaaS
new
COMING SOON

Generic Object Storage

Enables real-time ingestion of objects from any S3-compatible object storage service for continuous data processing.
Cloud Security
new
COMING SOON

GitLab Issues

Get all Gitlab issues the authenticated user has access to associated with a project.
Application Security
new
COMING SOON

Outputs

AWS OpenSearch

Outputs data to OpenSearch. Compatible with OpenSearch's data ingestion and querying capabilities.
Outputs
new
COMING SOON

AWS S3

Writes data to Amazon S3 buckets in various file formats (i.e., Parquet) and supporting partitioning.
Outputs
new
COMING SOON

AWS SQS

Publishes data to specified Amazon SQS queues. Supports both standard and FIFO queues.
Outputs
new
COMING SOON

AWS Security Lake

Send OCSF records to Amazon Security Lake, enabling centralized storage and analysis of security data in a standardized format.
Outputs
new
COMING SOON

Axiom

Send data to Axiom for observability and log management
Outputs
new
COMING SOON

Backblaze

Write data to Backblaze B2 Cloud Storage buckets.
Outputs
new
COMING SOON

Cribl HTTP Source

Sends data to a Cribl HTTP Source using standard HTTP requests.
Outputs
new
COMING SOON

Crowdstrike Falcon Next-Gen SIEM

Forwards processed data to Crowdstrike's Next-Gen SIEM.
Outputs
new
COMING SOON

Datadog Logs

Send records to Datadog logs for monitoring and analytics.
Outputs
new
COMING SOON

Elastic NV Elasticsearch

Sends data to an Elasticsearch cluster for indexing, search, and analysis.
Outputs
new
COMING SOON

Generic Object Storage

Writes data to S3-compatible object storage services in various file formats (i.e., Parquet) and supporting partitioning.
Outputs
new
COMING SOON

Google BigQuery

Load data into your Google BigQuery project
Outputs
new
COMING SOON

Google Cloud MySQL

Send raw records directly to your Google Cloud MySQL Instance.
Outputs
new
COMING SOON

Google Cloud PostgreSQL

Send raw records directly to your Google Cloud PostgreSQL Instance.
Outputs
new
COMING SOON

Google Cloud SQL Server

Send raw records directly to your Google Cloud SQL Server Instance.
Outputs
new
COMING SOON

Google Cloud Storage

Allows you to write data to Google Cloud Storage Output bucket for archiving or downstream processing.
Outputs
new
COMING SOON

Microsoft Azure Blob Storage

Writes data to Azure Containers in various file formats (i.e., Parquet).
Outputs
new
COMING SOON

Microsoft Azure Sentinel

Sends data to Microsoft Sentinel for querying and alerting.
Outputs
new
COMING SOON

Monad /dev/null

This output is used in testing pipelines and discards the data sent to it.
Outputs
new
COMING SOON

Monad HTTP

Delivers data via HTTP POST requests to any configurable endpoint.
Outputs
new
COMING SOON

Monad KV Lookup

Stores key-value pairs from incoming records in a key-value store for later usage by the KV Lookup Enrichment
Outputs
new
COMING SOON

PagerDuty

Sends events to PagerDuty for incident management and operational awareness.
Outputs
new
COMING SOON

Panther

Enables Panther's support for ingesting logs using Panther's HTTP Custom Log Format Source.
Outputs
new
COMING SOON

PostgreSQL

Send raw records directly to a PostgreSQL database.
Outputs
new
COMING SOON

Snowflake

Enables seamless data transfer by batch processing messages into JSONL files and securely uploading them to Snowflake.
Outputs
new
COMING SOON

Splunk

Sends data to Splunk Cloud or Enterprise environments.
Outputs
new
COMING SOON

Sumo Logic

Sends data to Sumo Logic’s hosted or installed collectors for search and monitoring.
Outputs
new
COMING SOON

Request an integration

Let us know which integrations you’d like us to add next.
We’re all ears.

Integration Idea submitted!
Oops! Something went wrong while submitting the form.

Security runs on data.
Make it work for you.

Effortlessly transform, filter, and route your security data. Tune out the noise and surface the signal with Monad.