Enrich events before they reach your SIEM. 175+ sources. Live now.
Read the blog
Read the blog

Plug in. Extract. Deliver. Integrations Made Easy.

Security data is messy. Tools generate inconsistent logs, APIs fail, and data gets stuck in silos. Monad simplifies the process by extracting, normalizing, and delivering data where it’s needed. Focus on security, we'll do the data wrangling.

Our trusted partners include

AWS LOGOCRIBLE LOGOSNOWFLAKE LOGOTENABLE LOGO

Categories

Clear all
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Inputs

ServiceNow Event

Collects event records from Event Management for monitoring and alerting (em_event).
System Logs
new
COMING SOON

ServiceNow Group

Collects user group memberships and organizational structure data (sys_user_group).
Identity Security
new
COMING SOON

ServiceNow Incident

Collects incident reports, severity classifications, and resolution tracking (incident).
Incident Response
new
COMING SOON

ServiceNow Infrastructure Service

Collects IT infrastructure service definitions and computing resource data (cmdb_ci_service).
Asset Inventory
new
COMING SOON

ServiceNow Location

Collects physical and logical location data for assets and users (cmn_location).
Asset Inventory
new
COMING SOON

ServiceNow Problem

Collects problem records, root cause analysis, and resolution documentation for recurring incidents (problem).
Incident Response
new
COMING SOON

ServiceNow Server

Collects server infrastructure inventory, specifications, and configuration data from the CMDB (cmdb_ci_server).
Asset Inventory
new
COMING SOON

ServiceNow Service

Collects business and IT service definitions, dependencies, and availability data (cmdb_ci_service).
Asset Inventory
new
COMING SOON

ServiceNow System Events

Collects system-level event records and notifications from the event queue (sysevent).
System Logs
new
COMING SOON

ServiceNow Transaction Logs

Collects transaction log records tracking system-level operations and administrative activities (syslog_transaction).
System Logs
new
COMING SOON

ServiceNow Universal

Collects data from any user-specified ServiceNow table via the Table API.
Universal
new
COMING SOON

ServiceNow User

Collects user account information, profiles, and access details (sys_user).
Identity Security
new
COMING SOON

ServiceNow Virtual Machine Hypervisor

Collects virtual machine hypervisor inventory and configuration data from the CMDB (cmdb_ci_vm).
Asset Inventory
new
COMING SOON

Slack Enterprise Audit Logs

Fetches and processes audit logs from Slack Enterprise for monitoring and analysis.
System Logs
new
COMING SOON

Slack Team Access Logs

Get Slack team access logs
SaaS
new
COMING SOON

Slack Team Integration Logs

Get Slack team integration logs
SaaS
new
COMING SOON

Slack User Directory

Lists all users within a Slack workspace for identity resolution and user monitoring.
Asset Inventory
new
COMING SOON

Slack User Groups

Lists all user groups within a Slack workspace for role-based context.
Asset Inventory
new
COMING SOON

Snowflake Access Grants

Retrieves Snowflake access grants for auditing role-based permissions and privilege assignments.
Identity Security
new
COMING SOON

Snowflake Table

Loads data from a Snowflake table using timestamp-based tracking and scheduled extraction.
Universal
new
COMING SOON

Snowflake User Directory

Lists all users in the Snowflake system for access monitoring and identity visibility.
Asset Inventory
new
COMING SOON

Snyk Issue Findings

Collects issue data from Snyk to surface security risks related to known vulnerabilities.
Application Security
new
COMING SOON

Snyk Organization Metadata

Pulls organization metadata from Snyk for structural and access context.
Application Security
new
COMING SOON

Snyk Project Metadata

Retrieves project metadata from Snyk to support asset tracking and issue attribution.
Application Security
new
COMING SOON

Snyk Scan Targets

Ingests scan target definitions from Snyk to map coverage and exposure surfaces.
Application Security
new
COMING SOON

Socket.dev Scan Results

Collects SBOM artifacts from full scans in your Socket.dev organization.
Application Security
new
COMING SOON

Tailscale Device Inventory

Collects device inventory from Tailscale for visibility into connected tailnet endpoints.
Asset Inventory
new
COMING SOON

Tailscale User Directory

Retrieves user metadata from Tailscale to support identity and access mapping.
Asset Inventory
new
COMING SOON

Tanium Assets

Collects endpoint data from Tanium, providing visibility into devices managed by your Tanium instanc
Asset Inventory
new
COMING SOON

Tanium Computer Groups

Retrieves computer group configurations from Tanium, enabling tracking of device collections and organizational structures within your environment
Asset Inventory
new
COMING SOON

Tanium Endpoints

Collects endpoint data from Tanium, providing visibility into devices managed by your Tanium instance
Asset Inventory
new
COMING SOON

Tanium Gateway GraphQL

Connects to Tanium Gateway GraphQL to execute custom queries and retrieve structured data from Tanium security platform.
Universal
new
COMING SOON

Tanium Software Packages

Gathers software package information from Tanium, offering insights into installed applications and software distribution across managed endpoints
Asset Inventory
new
COMING SOON

Teleport Audit Logs

Collects audit events from Teleport including user logins, access requests, application access events and failed authentication attempts.
System Logs
new
COMING SOON

Tenable Asset Inventory

Ingests asset inventory data from Tenable to support vulnerability correlation and security posture management.
Asset Inventory
new
COMING SOON

Tenable Asset Inventory Cron

Ingests asset inventory data from Tenable to support vulnerability correlation and security posture management.
Asset Inventory
new
COMING SOON

Tenable Vulnerability Findings

Pulls vulnerability findings from Tenable for risk analysis and remediation workflows.
Vulnerability Management
new
COMING SOON

Tenable Vulnerability Findings Cron

Pulls vulnerability findings from Tenable for risk analysis and remediation workflows.
Vulnerability Management
new
COMING SOON

Tines Event Stream

Collects workflow and alert events from your Tines tenant for automation visibility and monitoring.
SaaS
new
COMING SOON

Twilio Event resources

Returns a list of Events from your Twilio account.
Data Security
new
COMING SOON

Twilio Sendgrid Email Activity

Collects email activity and engagement data from your Twilio SendGrid account for tracking email delivery, opens, clicks, and other engagement metrics.
Application Security
new
COMING SOON

Vercel Audit Logs

Collects and ingests audit logs from Vercel, providing visibility into activities and actions within your Vercel organization.
SaaS
new
COMING SOON

Vercel User Events

Collects and ingests user events from Vercel, providing visibility into activities and actions within your Vercel organization.
SaaS
new
COMING SOON

Wells Fargo Transaction Detail

Fetches Wells Fargo transaction details for financial monitoring and compliance tracking.
Compliance
new
COMING SOON

Wiz Audit Logs

Grabs Audit Logs from Wiz API
System Logs
new
COMING SOON

Wiz Cloud Config Findings

Ingests configuration-related findings from Wiz to identify misconfigurations across cloud environments.
Cloud Security
new
COMING SOON

Wiz Cloud Resource Inventory

Ingests cloud resource metadata from Wiz for asset discovery and environment mapping.
Asset Inventory
new
COMING SOON

Wiz Cloud Resource Inventory Reports

Ingests cloud resource metadata from Wiz through reports on a cron to support asset discovery and environment mapping.
Universal
new
COMING SOON

Wiz Issue Findings

Retrieves issue data from Wiz to support security incident tracking and investigation.
Cloud Security
new
COMING SOON

Wiz Issues Report

Retrieves issue data from Wiz through reports on a cron to support security incident tracking and investigation.
Universal
new
COMING SOON

Outputs

AWS OpenSearch

Outputs data to OpenSearch. Compatible with OpenSearch's data ingestion and querying capabilities.
Outputs
new
COMING SOON

AWS S3

Writes data to Amazon S3 buckets in various file formats (i.e., Parquet) and supporting partitioning.
Outputs
new
COMING SOON

AWS SQS

Publishes data to specified Amazon SQS queues. Supports both standard and FIFO queues.
Outputs
new
COMING SOON

AWS Security Lake

Send OCSF records to Amazon Security Lake, enabling centralized storage and analysis of security data in a standardized format.
Outputs
new
COMING SOON

Axiom

Send data to Axiom for observability and log management
Outputs
new
COMING SOON

Backblaze

Write data to Backblaze B2 Cloud Storage buckets.
Outputs
new
COMING SOON

Cribl HTTP Source

Sends data to a Cribl HTTP Source using standard HTTP requests.
Outputs
new
COMING SOON

Crowdstrike Falcon Next-Gen SIEM

Forwards processed data to Crowdstrike's Next-Gen SIEM.
Outputs
new
COMING SOON

Datadog Logs

Send records to Datadog logs for monitoring and analytics.
Outputs
new
COMING SOON

Elastic NV Elasticsearch

Sends data to an Elasticsearch cluster for indexing, search, and analysis.
Outputs
new
COMING SOON

Generic Object Storage

Writes data to S3-compatible object storage services in various file formats (i.e., Parquet) and supporting partitioning.
Outputs
new
COMING SOON

Google BigQuery

Load data into your Google BigQuery project
Outputs
new
COMING SOON

Google Cloud MySQL

Send raw records directly to your Google Cloud MySQL Instance.
Outputs
new
COMING SOON

Google Cloud PostgreSQL

Send raw records directly to your Google Cloud PostgreSQL Instance.
Outputs
new
COMING SOON

Google Cloud SQL Server

Send raw records directly to your Google Cloud SQL Server Instance.
Outputs
new
COMING SOON

Google Cloud Storage

Allows you to write data to Google Cloud Storage Output bucket for archiving or downstream processing.
Outputs
new
COMING SOON

Microsoft Azure Blob Storage

Writes data to Azure Containers in various file formats (i.e., Parquet).
Outputs
new
COMING SOON

Microsoft Azure Sentinel

Sends data to Microsoft Sentinel for querying and alerting.
Outputs
new
COMING SOON

Monad /dev/null

This output is used in testing pipelines and discards the data sent to it.
Outputs
new
COMING SOON

Monad HTTP

Delivers data via HTTP POST requests to any configurable endpoint.
Outputs
new
COMING SOON

Monad KV Lookup

Stores key-value pairs from incoming records in a key-value store for later usage by the KV Lookup Enrichment
Outputs
new
COMING SOON

PagerDuty

Sends events to PagerDuty for incident management and operational awareness.
Outputs
new
COMING SOON

Panther

Enables Panther's support for ingesting logs using Panther's HTTP Custom Log Format Source.
Outputs
new
COMING SOON

PostgreSQL

Send raw records directly to a PostgreSQL database.
Outputs
new
COMING SOON

Snowflake

Enables seamless data transfer by batch processing messages into JSONL files and securely uploading them to Snowflake.
Outputs
new
COMING SOON

Splunk

Sends data to Splunk Cloud or Enterprise environments.
Outputs
new
COMING SOON

Sumo Logic

Sends data to Sumo Logic’s hosted or installed collectors for search and monitoring.
Outputs
new
COMING SOON

Request an integration

Let us know which integrations you’d like us to add next.
We’re all ears.

Integration Idea submitted!
Oops! Something went wrong while submitting the form.

Security runs on data.
Make it work for you.

Effortlessly transform, filter, and route your security data. Tune out the noise and surface the signal with Monad.