Enrich events before they reach your SIEM. 250+ sources. Live now.
Read the blog
Read the blog

Plug in. Extract. Deliver. Integrations Made Easy.

Security data is messy. Tools generate inconsistent logs, APIs fail, and data gets stuck in silos. Monad simplifies the process by extracting, normalizing, and delivering data where it’s needed. Focus on security, we'll do the data wrangling.

Our trusted partners include

AWS LOGOCRIBLE LOGOSNOWFLAKE LOGOTENABLE LOGO

Categories

Clear all
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Inputs

Google Workspace Keep Activity

Fetches logs on creation, modification, and deletion of Google Keep notes in a Google Workspace domain.
SaaS
new
COMING SOON

Google Workspace Login Activity

Retrieves user login activity from Google Workspace to track authentication patterns.
Identity Security
new
COMING SOON

Google Workspace Meet Activity

Fetches audit logs for Google Meet usage in a Google Workspace domain.
SaaS
new
COMING SOON

Google Workspace OAuth Activity

Collects OAuth activity logs from Google Workspace to monitor third-party app access.
Identity Security
new
COMING SOON

Google Workspace Rules Activity

Fetches logs for when rules are applied, modified, or created in a Google Workspace domain.
Security Operations
new
COMING SOON

Google Workspace Saml Activity

Fetches user account security changes for a Google Workspace domain.
Identity Security
new
COMING SOON

Google Workspace Takeout Activity

Fetches takeout usage logs from google workspace to monitor data export activity.
SaaS
new
COMING SOON

Google Workspace User Accounts Activity

Fetches user account activity logs from Google Workspace for data governance.
Identity Security
new
COMING SOON

Google Workspace Users

Pulls user metadata from Google Workspace, including IDs and roles for directory visibility.
Asset Inventory
new
COMING SOON

Google Workspace Vault Activity

Fetches access and audit logs from Google Vault.
SaaS
new
COMING SOON

Greenhouse Audit Logs

Pulls audit log events from the Greenhouse Audit Log API for monitoring and analysis.
SaaS
new
COMING SOON

Jira App Roles

Fetches Jira application roles for auditing access configuration and permission mapping.
Asset Inventory
new
COMING SOON

Jira User Directory

Returns all Jira users, including active, inactive, and previously deleted accounts.
Asset Inventory
new
COMING SOON

JumpCloud Events

Fetches Directory Insights events from JumpCloud for monitoring and security audit analysis.
System Logs
new
COMING SOON

Koi Audit Logs

Ingests audit log events from Koi Security including remediation, policy, approval, device, and endpoint activities.
System Logs
new
COMING SOON

Kolide Audit Logs

Fetch audit log events from Kolide, capturing all administrative actions and security-relevant activities.
System Logs
new
COMING SOON

Microsoft 365 DLP Events

Delivers Data Loss Prevention (DLP) events across all supported Office 365 workloads.
System Logs
new
COMING SOON

Microsoft 365 Exchange Audit Logs

Retrieves Exchange-related audit events including mailbox and email activity.
System Logs
new
COMING SOON

Microsoft 365 Sharepoint Audit Logs

Collects SharePoint audit events covering file access, sharing, and site interactions.
System Logs
new
COMING SOON

Microsoft Azure Activity Logs

Ingests Azure control plane logs from the Monitor API to track admin activity across services.
Cloud Security
new
COMING SOON

Microsoft Azure Blob Storage

Enables real-time ingestion of objects written to an Azure container for continuous data processing.
Cloud Security
new
COMING SOON

Microsoft Azure VNet Flow Logs

Ingests Azure Virtual Network Flow Logs from Azure Blob Storage to analyze network traffic patterns and security events.
Network Security
new
COMING SOON

Microsoft Azure Virtual Machine

Fetches the list of Virtual Machines and their meta data from Azure subscription.
Asset Inventory
new
COMING SOON

Microsoft Defender XDR Alerts

Fetches alerts generated from different services in Microsoft Defender XDR
Security Operations
new
COMING SOON

Microsoft Defender XDR Incidents

Fetches incidents from Microsoft Defender XDR that are automatically created by correlating and aggregating alerts from multiple Microsoft security services.
Security Operations
new
COMING SOON

Microsoft Defender for Cloud Alerts

Pulls security alert events from Microsoft Defender for Cloud.
Cloud Security
new
COMING SOON

Microsoft Defender for Cloud Compliance

Ingests compliance findings from Microsoft Defender for Cloud for audit and posture assessment.
Cloud Security
new
COMING SOON

Microsoft Defender for Endpoint Alerts

Collects alert data from Microsoft Defender for Endpoint for threat detection and response.
Endpoint Security
new
COMING SOON

Microsoft Entra ID

Collects logs from Entra ID (formerly Azure AD) via Log Analytics for authentication and access tracking.
Identity Security
new
COMING SOON

Microsoft Entra Id Audit Logs

Captures Entra ID (formerly Azure Active Directory) audit events such as user, group, and directory activity.
System Logs
new
COMING SOON

Microsoft Event Hubs

Streams real-time data from Azure Event Hubs for event ingestion and processing
Universal
new
COMING SOON

Microsoft General Audit Logs

Provides general Office 365 audit events from workloads not covered by other audit categories.
System Logs
new
COMING SOON

Microsoft Log Analytics Query

Runs and ingests custom queries from Azure Log Analytics to collect operational or identity-related logs
Cloud Security
new
COMING SOON

Monad Event Generator - Custom Templates

Generates structured test events using predefined templates for testing pipelines.
Universal
new
COMING SOON

Monad HTTP Input

Accepts POSTed data directly to the Monad API endpoint.
Universal
new
COMING SOON

Monad OTel Input

Accepts GRPC or HTTPS OTel data directly to the Monad API endpoint.
Universal
new
COMING SOON

Monad Organization Logs

Collects internal logs from Monad organizations for debugging and pipeline visibility.
Universal
new
COMING SOON

Monad Prometheus Remote Write

Webhook for receiving Prometheus remote-write data.
Universal
new
COMING SOON

Monad Splunk HEC Input

Accepts POSTed data directly to the Monad Splunk HEC endpoints.
Universal
new
COMING SOON

Monad Synthetic Data Generator

Generates synthetic events for testing pipeline functionality and transformations.
Universal
new
COMING SOON

MongoDB Org Events

Ingests organization-level events from MongoDB, such as database or security activity.
SaaS
new
COMING SOON

MongoDB Project Events

Collects project-level events from MongoDB, including billing, security, and system updates.
SaaS
new
COMING SOON

Nightfall Posture Events

Ingests Nightfall posture events that track permission changes, data access, and security policy violations across cloud applications.
Identity Security
new
COMING SOON

Okta App Inventory

Fetches application data from Okta for continuous visibility into app provisioning and access control.
Asset Inventory
new
COMING SOON

Okta Auth0 Log Events

Retrieve log entries from the Auth0 management API
System Logs
new
COMING SOON

Okta Auth0 Log Events Stream

Retrieve log entries streamed by Auth0 Log stream
System Logs
new
COMING SOON

Okta Event Hooks

Webhook for receiving Okta Event Hooks.
Universal
new
COMING SOON

Okta Identity Groups

Retrieves group data from Okta for identity and access management monitoring.
Asset Inventory
new
COMING SOON

Okta System Audit Logs

Ingests Okta system events for audit trail analysis and platform activity monitoring.
Identity Security
new
COMING SOON

Okta User Directory

Pulls user data from Okta, including metadata for authentication and identity correlation.
Asset Inventory
new
COMING SOON

Outputs

AWS OpenSearch

Outputs data to OpenSearch. Compatible with OpenSearch's data ingestion and querying capabilities.
Outputs
new
COMING SOON

AWS S3

Writes data to Amazon S3 buckets in various file formats (i.e., Parquet) and supporting partitioning.
Outputs
new
COMING SOON

AWS SQS

Publishes data to specified Amazon SQS queues. Supports both standard and FIFO queues.
Outputs
new
COMING SOON

AWS Security Lake

Send OCSF records to Amazon Security Lake, enabling centralized storage and analysis of security data in a standardized format.
Outputs
new
COMING SOON

Axiom

Send data to Axiom for observability and log management
Outputs
new
COMING SOON

Backblaze

Write data to Backblaze B2 Cloud Storage buckets.
Outputs
new
COMING SOON

Cribl HTTP Source

Sends data to a Cribl HTTP Source using standard HTTP requests.
Outputs
new
COMING SOON

Crowdstrike Falcon Next-Gen SIEM

Forwards processed data to Crowdstrike's Next-Gen SIEM.
Outputs
new
COMING SOON

Datadog Logs

Send records to Datadog logs for monitoring and analytics.
Outputs
new
COMING SOON

Elastic NV Elasticsearch

Sends data to an Elasticsearch cluster for indexing, search, and analysis.
Outputs
new
COMING SOON

Generic Object Storage

Writes data to S3-compatible object storage services in various file formats (i.e., Parquet) and supporting partitioning.
Outputs
new
COMING SOON

Google BigQuery

Load data into your Google BigQuery project
Outputs
new
COMING SOON

Google Cloud MySQL

Send raw records directly to your Google Cloud MySQL Instance.
Outputs
new
COMING SOON

Google Cloud PostgreSQL

Send raw records directly to your Google Cloud PostgreSQL Instance.
Outputs
new
COMING SOON

Google Cloud SQL Server

Send raw records directly to your Google Cloud SQL Server Instance.
Outputs
new
COMING SOON

Google Cloud Storage

Allows you to write data to Google Cloud Storage Output bucket for archiving or downstream processing.
Outputs
new
COMING SOON

Microsoft Azure Blob Storage

Writes data to Azure Containers in various file formats (i.e., Parquet).
Outputs
new
COMING SOON

Microsoft Azure Sentinel

Sends data to Microsoft Sentinel for querying and alerting.
Outputs
new
COMING SOON

Monad /dev/null

This output is used in testing pipelines and discards the data sent to it.
Outputs
new
COMING SOON

Monad HTTP

Delivers data via HTTP POST requests to any configurable endpoint.
Outputs
new
COMING SOON

Monad KV Lookup

Stores key-value pairs from incoming records in a key-value store for later usage by the KV Lookup Enrichment
Outputs
new
COMING SOON

PagerDuty

Sends events to PagerDuty for incident management and operational awareness.
Outputs
new
COMING SOON

Panther

Enables Panther's support for ingesting logs using Panther's HTTP Custom Log Format Source.
Outputs
new
COMING SOON

PostgreSQL

Send raw records directly to a PostgreSQL database.
Outputs
new
COMING SOON

Snowflake

Enables seamless data transfer by batch processing messages into JSONL files and securely uploading them to Snowflake.
Outputs
new
COMING SOON

Splunk

Sends data to Splunk Cloud or Enterprise environments.
Outputs
new
COMING SOON

Sumo Logic

Sends data to Sumo Logic’s hosted or installed collectors for search and monitoring.
Outputs
new
COMING SOON

Request an integration

Let us know which integrations you’d like us to add next.
We’re all ears.

Integration Idea submitted!
Oops! Something went wrong while submitting the form.

The backbone for
security telemetry.

Effortlessly transform, filter, and route your security data. Tune out the noise and surface the signal with Monad.