The connector catalog, configuring and testing a connector, outbound webhooks and their signatures, and where alerts get delivered.
20 articles
Integrations and notifications
The configuration form, how your credentials are encrypted, what the test button actually proves, and the exact messages you will see when something is wrong.
Integrations and notifications
A read-only bind-and-search directory pull over LDAPS or StartTLS, with Active Directory's own attribute conventions as the default.
Integrations and notifications
Connect either cloud-native alerting service and its findings poll automatically into your SIEM incident queue every five minutes, deduplicated by the vendor's own finding id.
Integrations and notifications
Pull Azure Resource Manager control-plane operations and GCP Cloud Audit Logs into SIEM as searchable, normalised events — not the same thing as your Entra sign-in log.
Integrations and notifications
Pull your directory from BambooHR or HiBob instead of an identity provider. Both derive synthetic groups from department, and both sync the full employee list every time.
Integrations and notifications
Bring another EDR's alerts and device inventory into Qorionix. All five connectors are read-only today - no isolate, no containment through any of them yet.
Integrations and notifications
Four more delivery destinations for alerts. Discord and Opsgenie are fully available; Google Chat and Freshservice are beta, with the exact limitation named.
Integrations and notifications
Bring Mimecast Targeted Threat Protection or Proofpoint TAP events into Qorionix as pre-triaged SIEM incidents. Read-only: neither connector releases or quarantines a message.
Integrations and notifications
Pull vulnerability findings from an existing scanner into Qorionix exposure management, matched to assets by hostname and polled automatically.
Integrations and notifications
Add an on-demand reputation lookup for an IP, domain, URL or file hash, using your own VirusTotal or AbuseIPDB key.
Integrations and notifications
Wazuh needs two separate credential sets - one for the Manager API, one for the Indexer API - and the health check tests both independently. What lands in Qorionix, and what does not yet.
Integrations and notifications
Give Sentinel-Q tools from a system you already run — ticketing, RMM, backup, a wiki — without waiting for a connector. Every tool arrives disabled, and here is why.
Integrations and notifications
An integration that quietly stopped syncing three weeks ago is an incident. What the platform checks, what it records, and why you still have to look.
Integrations and notifications
How to register an endpoint, which of the nineteen event types actually fire, at-least-once delivery, the retry policy, and the six types nothing emits yet.
Integrations and notifications
Read-only directory sync from seven identity providers: Okta, JumpCloud, Auth0, OneLogin, Keycloak, PingOne and AWS IAM. What each needs and what it does not carry over.
Integrations and notifications
The Set up button on a catalogue capability makes Qorionix the identity provider for another product. What the short form asks, what you must paste back, and where OIDC stops.
Integrations and notifications
Thirty-six entries, each marked available, beta or planned. What each status means, which rows work today, and why a listing is not an integration.
Integrations and notifications
The exact headers, the signing scheme and four rules to follow, with working Python and Node you can paste into your receiver today.
Integrations and notifications
Entra ID, AWS and Google Cloud can each be enumerated for privileged identities. One is proven against a live tenant, two are not, on-premises is not built, and each has real gaps.
Integrations and notifications
Email works with no configuration. Slack, Teams and PagerDuty are built but have no self-service setup yet. What is sent, what is suppressed, and why.