Enrich events before they reach your SIEM. 175+ sources. Live now.
Read the blog
Read the blog

Plug in. Extract. Deliver. Integrations Made Easy.

Security data is messy. Tools generate inconsistent logs, APIs fail, and data gets stuck in silos. Monad simplifies the process by extracting, normalizing, and delivering data where it’s needed. Focus on security, we'll do the data wrangling.

Our trusted partners include

AWS LOGOCRIBLE LOGOSNOWFLAKE LOGOTENABLE LOGO

Categories

Clear all
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Inputs

Github Audit Logs

Retrieves repository, permission, and authentication activity logs from GitHub Enterprise.
SaaS
new
COMING SOON

Github Organization Audit Logs

Retrieves organization audit logs from GitHub.
SaaS
new
COMING SOON

Github Security Advisories

Ingests vulnerability data from GitHub’s public Advisory Database for supply chain risk insights.
Application Security
new
COMING SOON

Google BigQuery

Loads data from a BigQuery table using timestamp-based tracking for incremental updates.
Universal
new
COMING SOON

Google BigQuery Cron

Loads all data from a BigQuery table on a scheduled basis.
Universal
new
COMING SOON

Google Cloud Asset Inventory

Pulls asset inventory metadata from Google Cloud for visibility and policy enforcement.
Cloud Security
new
COMING SOON

Google Cloud Audit Logs

Ingests Google Cloud Audit Logs to track admin actions, access events, and policy changes across your GCP environment.
Cloud Security
new
COMING SOON

Google Cloud Storage

Collects and ingests data from a Google Cloud Storage bucket.
Cloud Security
new
COMING SOON

Google Workspace Access Transparency Activity

Fetches logs when Google personnel access your data in a Google Workspace domain.
Compliance
new
COMING SOON

Google Workspace Admin Activity

Collects admin-level activity logs from Google Workspace for auditing configuration and access changes.
SaaS
new
COMING SOON

Google Workspace Alert Center

Ingest alerts that identify potential issues within your google workspace domain.
Security Operations
new
COMING SOON

Google Workspace Calendar Activity

Fetches audit logs on Google Calendar events such as event creation, modification, sharing, and deletion in a Google Workspace domain.
SaaS
new
COMING SOON

Google Workspace Chat Activity

Fetches audit logs on Google Chat activities such as message creation, deletion, and modification in a Google Workspace domain.
SaaS
new
COMING SOON

Google Workspace Chrome Activity

Fetches audit logs on Chrome OS enterprise including, but not limited to, device logins, policy changes, and user activity in a Google Workspace domain.
Endpoint Security
new
COMING SOON

Google Workspace Context Aware Access Activity

Fetches logs for context-aware access denied events in a Google Workspace domain.
Identity Security
new
COMING SOON

Google Workspace Data Studio Activity

Tracks Data Studio activity such as report creation, modification, sharing, and deletion in a Google Workspace domain.
SaaS
new
COMING SOON

Google Workspace Device Activity

Pulls device-level activity logs from Google Workspace Device API to monitor endpoints.
Endpoint Security
new
COMING SOON

Google Workspace Drive Activity

Fetches file and folder access logs from Google Workspace Drive for data governance.
Identity Security
new
COMING SOON

Google Workspace GCP Activity

Fetches GCP Cloud OS Login events in a Google Workspace domain.
Cloud Security
new
COMING SOON

Google Workspace Gemini Activity

Fetches Gemini Audit Activity From Google Workspace.
System Logs
new
COMING SOON

Google Workspace Gmail Activity

Fetches gmail usage logs from google workspace to monitor email activity.
SaaS
new
COMING SOON

Google Workspace Groups Activity

Fetches audit logs on Google Group creation, modification, and deletion in a Google Workspace domain.
Identity Security
new
COMING SOON

Google Workspace Groups Enterprise Activity

Fetches audit logs on Enterprise Group creation, modification, and deletion in a Google Workspace domain.
Identity Security
new
COMING SOON

Google Workspace Jamboard Activity

Fetches audit logs on Jamboard Device events in a Google Workspace domain.
Endpoint Security
new
COMING SOON

Google Workspace Keep Activity

Fetches logs on creation, modification, and deletion of Google Keep notes in a Google Workspace domain.
SaaS
new
COMING SOON

Google Workspace Login Activity

Retrieves user login activity from Google Workspace to track authentication patterns.
Identity Security
new
COMING SOON

Google Workspace Meet Activity

Fetches audit logs for Google Meet usage in a Google Workspace domain.
SaaS
new
COMING SOON

Google Workspace OAuth Activity

Collects OAuth activity logs from Google Workspace to monitor third-party app access.
Identity Security
new
COMING SOON

Google Workspace Rules Activity

Fetches logs for when rules are applied, modified, or created in a Google Workspace domain.
Security Operations
new
COMING SOON

Google Workspace Saml Activity

Fetches user account security changes for a Google Workspace domain.
Identity Security
new
COMING SOON

Google Workspace User Accounts Activity

Fetches user account activity logs from Google Workspace for data governance.
Identity Security
new
COMING SOON

Google Workspace Users

Pulls user metadata from Google Workspace, including IDs and roles for directory visibility.
Asset Inventory
new
COMING SOON

Google Workspace Vault Activity

Fetches access and audit logs from Google Vault.
Compliance
new
COMING SOON

Greenhouse Audit Logs

Pulls audit log events from the Greenhouse Audit Log API for monitoring and analysis.
SaaS
new
COMING SOON

Jira App Roles

Fetches Jira application roles for auditing access configuration and permission mapping.
Asset Inventory
new
COMING SOON

Jira User Directory

Returns all Jira users, including active, inactive, and previously deleted accounts.
Asset Inventory
new
COMING SOON

Microsoft 365 DLP Events

Delivers Data Loss Prevention (DLP) events across all supported Office 365 workloads.
System Logs
new
COMING SOON

Microsoft 365 Exchange Audit Logs

Retrieves Exchange-related audit events including mailbox and email activity.
System Logs
new
COMING SOON

Microsoft 365 Sharepoint Audit Logs

Collects SharePoint audit events covering file access, sharing, and site interactions.
System Logs
new
COMING SOON

Microsoft Azure Activity Logs

Ingests Azure control plane logs from the Monitor API to track admin activity across services.
Cloud Security
new
COMING SOON

Microsoft Azure Blob Storage

Enables real-time ingestion of objects written to an Azure container for continuous data processing.
Cloud Security
new
COMING SOON

Microsoft Azure VNet Flow Logs

Ingests Azure Virtual Network Flow Logs from Azure Blob Storage to analyze network traffic patterns and security events.
Network Security
new
COMING SOON

Microsoft Azure Virtual Machine

Fetches the list of Virtual Machines and their meta data from Azure subscription.
Asset Inventory
new
COMING SOON

Microsoft Defender XDR Alerts

Fetches alerts generated from different services in Microsoft Defender XDR
Security Operations
new
COMING SOON

Microsoft Defender XDR Incidents

Fetches incidents from Microsoft Defender XDR that are automatically created by correlating and aggregating alerts from multiple Microsoft security services.
Security Operations
new
COMING SOON

Microsoft Defender for Cloud Alerts

Pulls security alert events from Microsoft Defender for Cloud.
Cloud Security
new
COMING SOON

Microsoft Defender for Cloud Compliance

Ingests compliance findings from Microsoft Defender for Cloud for audit and posture assessment.
Cloud Security
new
COMING SOON

Microsoft Defender for Endpoint Alerts

Collects alert data from Microsoft Defender for Endpoint for threat detection and response.
Endpoint Security
new
COMING SOON

Microsoft Entra ID

Collects logs from Entra ID (formerly Azure AD) via Log Analytics for authentication and access tracking.
Identity Security
new
COMING SOON

Microsoft Entra Id Audit Logs

Captures Entra ID (formerly Azure Active Directory) audit events such as user, group, and directory activity.
System Logs
new
COMING SOON

Outputs

AWS OpenSearch

Outputs data to OpenSearch. Compatible with OpenSearch's data ingestion and querying capabilities.
Outputs
new
COMING SOON

AWS S3

Writes data to Amazon S3 buckets in various file formats (i.e., Parquet) and supporting partitioning.
Outputs
new
COMING SOON

AWS SQS

Publishes data to specified Amazon SQS queues. Supports both standard and FIFO queues.
Outputs
new
COMING SOON

AWS Security Lake

Send OCSF records to Amazon Security Lake, enabling centralized storage and analysis of security data in a standardized format.
Outputs
new
COMING SOON

Axiom

Send data to Axiom for observability and log management
Outputs
new
COMING SOON

Backblaze

Write data to Backblaze B2 Cloud Storage buckets.
Outputs
new
COMING SOON

Cribl HTTP Source

Sends data to a Cribl HTTP Source using standard HTTP requests.
Outputs
new
COMING SOON

Crowdstrike Falcon Next-Gen SIEM

Forwards processed data to Crowdstrike's Next-Gen SIEM.
Outputs
new
COMING SOON

Datadog Logs

Send records to Datadog logs for monitoring and analytics.
Outputs
new
COMING SOON

Elastic NV Elasticsearch

Sends data to an Elasticsearch cluster for indexing, search, and analysis.
Outputs
new
COMING SOON

Generic Object Storage

Writes data to S3-compatible object storage services in various file formats (i.e., Parquet) and supporting partitioning.
Outputs
new
COMING SOON

Google BigQuery

Load data into your Google BigQuery project
Outputs
new
COMING SOON

Google Cloud MySQL

Send raw records directly to your Google Cloud MySQL Instance.
Outputs
new
COMING SOON

Google Cloud PostgreSQL

Send raw records directly to your Google Cloud PostgreSQL Instance.
Outputs
new
COMING SOON

Google Cloud SQL Server

Send raw records directly to your Google Cloud SQL Server Instance.
Outputs
new
COMING SOON

Google Cloud Storage

Allows you to write data to Google Cloud Storage Output bucket for archiving or downstream processing.
Outputs
new
COMING SOON

Microsoft Azure Blob Storage

Writes data to Azure Containers in various file formats (i.e., Parquet).
Outputs
new
COMING SOON

Microsoft Azure Sentinel

Sends data to Microsoft Sentinel for querying and alerting.
Outputs
new
COMING SOON

Monad /dev/null

This output is used in testing pipelines and discards the data sent to it.
Outputs
new
COMING SOON

Monad HTTP

Delivers data via HTTP POST requests to any configurable endpoint.
Outputs
new
COMING SOON

Monad KV Lookup

Stores key-value pairs from incoming records in a key-value store for later usage by the KV Lookup Enrichment
Outputs
new
COMING SOON

PagerDuty

Sends events to PagerDuty for incident management and operational awareness.
Outputs
new
COMING SOON

Panther

Enables Panther's support for ingesting logs using Panther's HTTP Custom Log Format Source.
Outputs
new
COMING SOON

PostgreSQL

Send raw records directly to a PostgreSQL database.
Outputs
new
COMING SOON

Snowflake

Enables seamless data transfer by batch processing messages into JSONL files and securely uploading them to Snowflake.
Outputs
new
COMING SOON

Splunk

Sends data to Splunk Cloud or Enterprise environments.
Outputs
new
COMING SOON

Sumo Logic

Sends data to Sumo Logic’s hosted or installed collectors for search and monitoring.
Outputs
new
COMING SOON

Request an integration

Let us know which integrations you’d like us to add next.
We’re all ears.

Integration Idea submitted!
Oops! Something went wrong while submitting the form.

Security runs on data.
Make it work for you.

Effortlessly transform, filter, and route your security data. Tune out the noise and surface the signal with Monad.