Technology Partners &
   Integrations

Absolute Software is a leader in Endpoint Resilience solutions and the industry’s only undeletable defense platform embedded in over a half-billion devices. Enabling a permanent digital tether between the endpoint and the enterprise who distributed it, Absolute provides IT and Security organizations with complete connectivity, visibility, and control, whether a device is on or off the corporate network, and empowers them with Self-Healing Endpoint™ security to ensure mission-critical apps remain healthy and deliver intended value.

Integration Story
Absolute enables joint customers to ensure that their Netskope steering client is never disabled. The application persistence module for Netskope, which enforces the check for a live process and the re-enablement of the process on a recurring basis, is live in the Absolute Console for joint customers.

Amazon Web Services offers a suite of cloud computing products that allow developers to create and host applications in a secure, scalable way. Use Netskope for Amazon Web Services to gain visibility and control over risky activities and protect your organization’s sensitive data.

ArcSight Threat Detection — Enhance threat hunting efforts and improve your security team’s efficiency with ArcSight. Powered by machine learning and AI, ArcSight Intelligence makes SOC teams more effective.

Integration Story
This integration enables ArcSight to search Netskope logs to enrich incidents, and then manage custom URL and quarantined files based on investigation findings.

Arctic Wolf® delivers a premier cloud-native security operations platform, designed to end cyber risk and empower organizations of virtually any size and industry to establish world-class security operations.

Integration story
When an Arctic Wolf Managed Detection and Response customer integrates their Netskope data with the Arctic Wolf Platform, in addition to receiving enhanced threat detection and response capabilities, they will also unlock the ability to have their Netskope-based security alerts investigated and triaged by Arctic Wolf’s industry-pioneering Concierge Security Team accelerating the ability to detect, respond to, and recover from advanced cyber threats targeting their organizations.

Aruba, the global SD-WAN leader, offers networking software that enables enterprises to build a modern WAN that drives maximum value from existing and ongoing cloud and digital transformation investments by delivering a self-driving wide area network that continuously learns and adapts to the needs of the business. Thousands of globally distributed enterprises have deployed the Unity EdgeConnect™ SD-WAN edge platform across 100 countries.

Aryaka, the Cloud-First WAN company, brings agility, simplicity and a great experience to consuming the WAN-as-a-service. An optimized global network and innovative technology stack delivers the industry’s #1 managed SD-WAN service and sets the gold standard for application performance. Aryaka’s SmartServices offer connectivity, application acceleration, security, cloud networking and insights leveraging global orchestration and provisioning. The company’s customers include hundreds of global enterprises including several in the Fortune 100.

Integration Story
Aryaka can establish a VPN tunnel from Aryaka SD WAN service to send traffic to Netskope for inspection and enforcement.

Asana empowers organizations to work smarter. Asana’s enterprise work management platform connects company-wide goals, strategic initiatives, and the execution of work in one place. Asana has over 150,000 customers and millions of users in 200+ countries and territories. Customers like Amazon, Roche, and T-Mobile, rely on Asana to manage everything from goal setting and tracking to capacity planning, to product launches.

Monitor usage and apply data loss prevention (DLP) policies to data that goes in and out of Asana. Confidently protect all your valuable data while using Asana + Netskope. The Asana for Netskope Connector detects and provides visibility on key platform activities ensuring all customer data inside Asana is monitored and secure.

• Applying DLP policies to data going in and out of Asana to comply with corporate policies or regulations
• Restrict use of Asana based on roles and user groups and adjust based on behavioral analytics
• Monitor Asana usage and apply granular policy in real-time to prevent data misuse and provide insights into Asana usage
• Reduce attack surface by blocking all non corporate domain or authenticated access to Asana

The most secure, passwordless authentication platform for tech forward-thinking organizations, globally. Breaking down the barriers between identity, security, and device management, Beyond Identity fundamentally changes the way the world logs in – eliminating passwords and providing users with a frictionless multi-factor login experience.

Integration Story
The Beyond Identity integration with Netskope SSE hardens access to corporate networks by delivering continuous, risk-based multi-factor authentication that positively identifies users and ensures only devices with a validated security posture gain access with a phishing-resistant, passwordless user experience.

In this way, organizations can secure access to their networks and the sensitive data contained therein by eliminating credential risk and ensuring device hygiene- all while adding the benefit of reduced friction for end users.

BeyondTrust is a worldwide leader in intelligent identity and access security, empowering organizations to protect identities, stop threats, and deliver dynamic access to empower and secure a work-from-anywhere world. Its integrated products and platform offer the industry’s most advanced privileged access management (PAM) solution, enabling organizations to quickly shrink their attack surface across traditional, cloud and hybrid environments.

Integration story
As users securely interact with applications via the Netskope security cloud, BeyondTrust continuously assures that they are authenticated and tracked. Netskope handles activities and data; BeyondTrust secures and manages privileges. Together, they provide a streamlined deployment strategy that allows both solutions to be fully leveraged by organizations side-by-side.

BitSight transforms how organizations manage cyber risk. The BitSight Security Ratings Platform applies sophisticated algorithms, producing daily security ratings that range from 250 to 900, to help organizations manage their own security performance; mitigate third party risk; underwrite cyber insurance policies; conduct financial diligence; and assess aggregate risk. With the largest ecosystem of users and information, BitSight is the Standard in Security Ratings. For more information, please visit www.BitSight.com

Integration Story
Netskope shares application risk with Bitsight for all the apps in use.

Blackberry is revolutionizing cybersecurity with products and services that proactively prevent, rather than reactively detect the execution of advanced persistent threats and malware. Blackberry’s technology is deployed on over ten million endpoints and protects hundreds of enterprise clients worldwide including Fortune 100 organizations and government institutions.

Integration Story
Netskope uses the presence or absence of the EDR client to decide if a device is managed or not.

Boldon James is a leader in data classification and secure messaging solutions, helping organizations of all sizes to manage sensitive information securely and in compliance with legislation and standards. Netskope and Boldon James together provide a robust solution to identify, classify, and protect sensitive data in the cloud through advanced, enterprise DLP and granular security policies for safe collaboration on all file types.

Netskope, a certified member of the Box Trust Program, helps organizations standardize on Box by providing an extra layer of security that encompasses protection against sensitive data loss and advanced threats. Learn more about Netskope for Box.

Integration Story
Netskope has the ability to securely enable real time interactions as well as data at rest in Box. Netskope can also trigger and read Box Sheild document classifications for better data protection.

The Cequence Unified API Protection platform helps organizations discover, comply, and protect their APIs and applications against attacks, business logic abuse, and fraud.

Integration Story
Netskope customers now have access to Cequence Security’s unique API-based threat intelligence. Cequence utilizes advanced artificial intelligence and machine learning to identify malicious actors across the globe, providing key security insights gained from evolving threats and attacks to ensure you have up-to-date protection for your mission-critical APIs and applications.

Check Point Software Technologies is a global leader in cyber security solutions, dedicated to protecting corporate enterprises and governments worldwide. Its solutions protect customers from cyber-attacks with an industry leading catch rate of malware, ransomware and other types of attacks. Netskope and Check Point deliver a solution to help organizations understand cloud usage and assess risk and protect against threats at the endpoint.

Integration Story
Netskope integrates with Check Point SandBlast ATP sandbox. Netskope sends suspicious files for sandbox detination and enforces based on the SandBlast verdict.

Citrix XenMobile delivers a complete Enterprise Mobility Management (EMM) solution, supporting multiple device types and operating systems. Netskope and Citrix provide a powerful joint solution to safely enable usage of sanctioned and unsanctioned cloud apps, from any mobile device, anywhere.

Integration Story
Citrix XenMobile can manage the Netskope client to all managed mobile devices to ensure that a device is connected to Netskope before connecting to the Internet to access corporate-led applications and instances.

CloudEagle.ai helps IT, Security & Procurement teams manage, govern & renew all their SaaS apps from one single platform. This platform enables enterprises to make SaaS management & governance a breeze & save 10–30% on their software spend. With industry-leading 500+ direct connectors, CloudEagle provides 100% visibility into all applications, licenses, spend and vendors. Using no code slack-enabled workflows, IT & security teams can streamline employee onboarding/offboarding, access reviews, licence harvesting and renewals. Procurement teams can also streamline SaaS purchasing. CloudEagle’s AI-powered database, called SaaSMap, provides accurate price benchmarking data to negotiate better with vendors & purchase the right product at the right price.

CloudEagle has processed over $2 billion and delivered over $150 million in savings. Its industry-leading 30-minute onboarding ensures immediate governance & savings from day 1.

Integration Story
CloudEagle.ai + Netskope integration enables IT and Security teams to gain deeper SaaS insights beyond logins, prevent shadow IT, and remediate security risks instantly, all from a single platform.

Organizations are dependent on data stored within a myriad of systems, requiring integration and automation to enable them to work at the speed of business. Cloudrise automates operational processes across data protection and privacy solutions, business applications, and visualization tools, to optimize policies, enhance reporting, and provide faster incident response. Starting with an assessment, we identify use cases, develop playbooks, and ultimately build, deploy, and manage the automation.

Integration Story
Netskope provides Cloudrise with advanced public cloud infrastructure security solutions that help them manage and reduce risk across their public cloud.

Cohesity is a leader in AI-powered data security and management. Cohesity makes it easier to protect, manage, and get value from data – across the data center, edge, and cloud. Cohesity helps organizations defend against cybersecurity threats with comprehensive data security and management capabilities.

Integration Story
Netskope One DSPM has partnered with Cohesity to deliver a custom platform integration, combining our robust Data Security Posture Management (DSPM), Data Access Governance (DAG), and Data Detection and Response (DDR) capabilities, enhancing compliance and audit readiness. Integrating Cohesity and Netskope One DSPM incorporates DSPM insights to identify gaps in your data protection program and ensure the safeguarding of your most sensitive assets.

Commvault helps more than 100,000 organizations to uncover, take action, and rapidly recover from cyber attacks—keeping data safe and businesses resilient and moving forward. Commvault offers the only cyber resilience platform that combines the best data security and rapid recovery at enterprise scale across any workload, anywhere with advanced AI-driven automation.

Integration Story
With the integrated data context and visibility with the Netskope Zero Trust Engine in combination with Commvault Cloud, customers can leverage AI-powered threat and data protection with ultra-sensitive data awareness to protect people and data anywhere they go.

Cribl makes open observability a reality for today’s tech professionals. The Cribl product suite defies data gravity with radical levels of choice and control. Wherever the data comes from, wherever it needs to go, Cribl delivers the freedom and flexibility to make choices, not compromises. It’s enterprise software that doesn’t suck, enables tech professionals to do what they need to do, and gives them the ability to say “Yes.” With Cribl, companies have the power to control their data, get more out of existing investments, and shape the observability future.

Integration Story
Netskope’s events and alerts can be pulled into Cribl via the Netskope REST v2 APIs. Joint customers can use Cribl Stream to filter and redirect to the destination of your liking.

View integration documentation.

CrowdStrike Falcon® is pioneering cloud-delivered endpoint protection. It unifies next-generation antivirus, endpoint detection and response (EDR), managed threat hunting, IT hygiene, and threat intelligence — all delivered via a single lightweight agent. Using its purpose-built, cloud-native architecture, the Falcon platform collects and analyzes more than 1 trillion endpoint events per week from millions of sensors deployed across 176 countries.

CyberArk integrates with Netskope for SAML, WS-FED authentication as well as for SCIM user and group provisioning and MFA workflows. CyberArk can deploy Netskope clients as an SSO application manually or as part of assertion workflow. It steers traffic to us via a reverse Proxy/IdP chain with a built in workflow to customize application behavior. CyberArk directory services can integrate/update the Netskope user list via SCIM. CyberArk MDM can manage a Netskope endpoint client.

Cybereason, creators of the leading Cybereason Defense Platform, gives the advantage back to the defender through a completely new approach to cybersecurity. Cybereason offers endpoint prevention, detection and response and active monitoring. The solution delivers multi-layered endpoint prevention by leveraging signature and signatureless techniques to prevent known and unknown threats in conjunction with behavioral and deception techniques to prevent ransomware and fileless attacks. Cybereason is a privately held, international company, headquartered in Boston, MA with customers in more than 30 countries.

Integration Story
Cybereason and Netsopke exchange IOCs bidirectionally for enhanced threat awarness.

D3 Security’s Smart SOAR platform is the only SOAR platform that combines automation and orchestration across unlimited integrated tools with an automated event pipeline that reduces event volume by 90% or more. Smart SOAR’s codeless playbooks automate enrichment and remediation tasks, while making it easy for enterprises and MSSPs to build, modify, and scale workflows for security operations, incident response, and threat hunting. Learn more at www.d3security.com.

Integration Story
D3 Smart SOAR integrates with Netskope to automate security workflows, dynamically updating URL lists and fetching real-time event data to enhance incident response without manual intervention.

Darktrace’s AI technology is relied on by around 8,900 customers worldwide to prevent, detect, respond, and heal from cyber-attacks. Headquartered in Cambridge, UK, the company has over 2,200 employees and over 30 offices worldwide. Its customers include public sector agencies, education institutions, media, organizations supplying critical infrastructure, and businesses of all sizes across every industry.

Integration Story
Netskope and Darktrace can be integrated to provide a more comprehensive view of an organization’s security posture. The integration allows Netskope to share its data with Darktrace, including information about user activity, cloud applications, and network traffic. This information can be used by Darktrace to detect threats that may not be visible to Netskope alone. For example, if a user is accessing a malicious website, Darktrace can use the information shared by Netskope to identify the threat and take action to block it. The integration can also be used to automate the response to threats, such as blocking malicious IP addresses or quarantining infected devices.

Discern Security is an AI-powered platform that analyzes and optimizes security controls and policies in real-time while fostering cross-platform intelligence by building a cybersecurity mesh.

Integration story
Leveraging Netskope’s capabilities allows organizations to assess their security stance through various perspectives. Discern Cloud enhances protection by implementing a two-tier security framework within SASE, EDR, and additional security mechanisms. Information collected from the SASE and EDR levels facilitates the refinement of specific entities through policy enforcement, thereby mitigating the business’s risk exposure. Implementing detailed policy controls helps minimize operational interruptions, ensuring business continuity.

Netskope integrates via the Dropbox for Business API and helps organizations standardize on Dropbox by adding an extra layer of security that encompasses protection against sensitive data loss and advanced threats.

Learn more about Netskope for Dropbox.

Integration Story
Netskope has the ability to securely enable real time interactions with as well as data at rest in DropBox.

Egnyte combines the power of cloud content management, data security, and AI into one intelligent content platform. More than 22,000 customers trust Egnyte to improve employee productivity, automate business processes, and safeguard critical data.

Egnyte classifies files by sensitivity, regulatory requirements, and business policies, then shares this intelligence using Microsoft Purview labels with your Cloud Access Security Broker (CASB) or Zero Trust Network Access (ZTNA) provider. This helps strengthen Data Protection measures across email, web traffic, and endpoints, reducing data leak risks. Egnyte also provides guidance for managing sensitive data throughout its lifecycle, enhancing overall data governance.

Egress is the first cloud email security platform to continuously assess human risk and dynamically adapt policy controls, defending against advanced phishing attacks and outbound data breaches. Leveraging contextual machine learning and neural networks, with seamless integration using cloud-native API architecture, Egress provides enhanced email protection and instant time to value.

Integration Story
Netskope and Egress’ strategic integration delivers unprecedented visibility into human risk and automated defenses that eliminate advanced email threats, tailored to each individual employee. Netskope’s User Confidence Index (UCI) combines with threat intelligence sourced from the Egress platform and an organization’s wider cybersecurity ecosystem to generate holistic human risk scores for each individual user and dynamically adapt inbound and outbound email security controls. Administrators and analysts gain instant access to centralized threat intelligence that surfaces meaningful insights from across the enterprise, elevating threat hunting capability and dramatically reducing time to response.

The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to accelerate the results that matter. We help people and organizations turn that possibility into results with the power of Search AI. With Elastic Security, AI-driven attack discovery and remediation recommendations rapidly automate detection and response to complex cyber threats, minimizing risk and protecting your organization’s reputation. Our solutions use intelligence and automation to accelerate results and derive value from massive amounts of data, at scale and on a single platform. We deliver enhanced resilience wherever data lives — in one cloud, across many clouds, or on-prem.

Elastic ingests, normalizes, parses, and enriches all data sent from the Netskope platform including alerts, events, and web transaction logs.

Exabeam is a leading provider of user and entity behavior analytics for cyber security and threat management teams to detect anomalous activities on their networks. Netskope partners with Exabeam to provide the most up-to-date cloud threat protection capabilities. Exabeam sends the latest in threat intelligence to Netskope for security teams to identify and remediate threats like compromised credentials from start to finish and place security and access policies for compliant cloud usage.

Integration Story
Exabeams integrates directly to Netskope to extract our event and alert logs, in order to populate and correlate Netskope data inside their analytics and incident response tools. Exabeam can also move a user to a differnt user group when that user has been shown to be high risk, the user has less access which is lower risk.

Expel is a security operations provider that offers managed detection and response (MDR), remediation, phishing support, and threat hunting. Our platform and people work together to make sense of your security signal—with your business in mind—to detect, understand, and fix issues fast.

Integration Story
Expel ingests Netskope alerts and events and can dynamically populate custom URL lists inside Netskope as a incident response action.

ExtraHop is the cybersecurity partner enterprises trust to reveal the unknown and unmask the attack. Our Reveal(x) 360 network detection and response platform delivers the 360-degree visibility needed to uncover the cybertruth. With full network transparency from ExtraHop, organizations can see more, know more, and stop more cyberattacks.

Forescout delivers complete asset intelligence and control for managed and unmanaged assets across the entire enterprise. The Forescout platform proactively identifies, protects, and ensures compliance of IT, OT, IoT, and IoMT endpoints through asset visibility, network security, risk and exposure management, and threat detection and response capabilities.

The Forescout Platform tracks corporate devices and continuously updates risk scores based on threats and vulnerabilities. This integration allows Netskope to consume the risk scores as additional criteria in customers’ Access Policies.

Fortinet (NASDAQ: FTNT) secures the largest enterprise, service provider, and government organizations around the world. Fortinet empowers its customers with intelligent, seamless protection across the expanding attack surface and the power to take on ever-increasing performance requirements of the borderless network—today and into the future. Only the Fortinet Security Fabric architecture can deliver security without compromise to address the most critical security challenges, whether in networked, application, cloud, or mobile environments.

To learn more, please visit https://www.fortinet.com.

Integration Story
Fortinet can establish a VPN tunnel from Fortigate to send traffic to Netskope for inspection and enforcement.

Integration Story
Fortras NCE engine interoperates with documents watermarked/modified by Fortra in order to obtain a lower false positive/negative rates of identifying DLP violations. NCE uses its existing set of DLP match rules to look for these markings. Please note that Digital Guardian (DG) OEM’s Fortra’s data classification engine, as such, we can act on documents modified DG’s Data Classification subscription enabled endpoints.

Google Cloud Platform lets you build and host applications and websites, store data, and analyze data on Google’s scalable infrastructure. Netskope for Google Cloud Platform offers full visibility and control of all activities and instances in Google Cloud Platform to ensure secure and compliant usage for your entire organization.

Google Security Operations is a cloud service, built as a specialized layer on top of Google infrastructure, designed for enterprises to privately retain, analyze, and search the large amounts of security and network telemetry they generate.

Integration Story
The integration between Google Security Operations (formerly Mandiant) fetches IoCs of the type of URL (URL, FQDN, IPv4, and IPv6), and MD5 from the Google Mandiant platform.

Google Workspace (formerly G Suite) has fast become the productivity suite of choice for many organizations. With Netskope for Google Workspace, organizations can deliver a seamless layer of security that allows users safe access to a single app such as Google Drive, or the whole app suite. Netskope and Google help you maintain the visibility and security controls you need to protect sensitive data, prevent its loss, and ensure compliance over G Suite.

Gurucul is a security analytics company that delivers radical clarity about cyber risk. The REVEAL platform is modular and provides TDIR, SIEM, UEBA, SOAR, NTA and identity analytics. The REVEAL platform ingests, normalizes, parses, enriches, and cost optimizes all data sent from Netskope including alerts, events, and web transaction logs.

The integration is bi-directional and supports adaptive response and orchestration. When threats are detected, REVEAL can respond by moving a high-risk user to a different more restricted group inside Netskope to reduce the risk of damage or data exfiltration.

Hunters SOC Platform is an automated, SaaS solution designed for the entire security operations workflow to offload and optimize the critical burden of security engineering and manual analyst workloads. Hunters enables teams to automatically identify and respond to threats more reliably than SIEMs, with ease and scale.

Integration:
Hunters parses Netskope data and uses it to protect your network in a more comprehensive way both in detection and investigation phases in the Hunters’ pipeline.

Supported data types include:

• Netskope Audit Events
• Netskope Application Events
• Netskope Alerts

IBM MaaS360 with Watson Enterprise Mobility Management gives you one platform to manage and secure your endpoints, including personal and corporate-owned devices across iOS, macOS, Android and Windows. MaaS360 and Netskope work together to ensure that policy and risk are tied to device compliance, and streamline the deployment of Netskope clients to endpoints for traffic steering.

Integration Story
IBM MaaS360 can manage the Netskope client to all managed mobile devices to ensure that device is connected to Netskope before connecting to the Internet to access corporate-led applications and instances.

IBM QRadar SIEM consolidates log events and network flow data from thousands of devices, endpoints and applications distributed throughout a network. It normalizes and correlates raw data to identify security offenses, and uses an advanced Sense Analytics engine to baseline normal behavior, detect anomalies, uncover advanced threats, and remove false positives. Netskope integrates with QRadar by doing a first pass of cloud DLP incidents through contextual analysis before funneling suspected violations to QRadar for further analysis. Protect your organization and streamline your incident management processes with Netskope and IBM QRadar.

Integration Story
IBM QRadar ingests, normalizes, and parses alert, event, and web transaction logs sent by the Netskope Cloud Exchange Cloud Log Shipper (CLS) module.

Integration Story
IBM Soar pulls event and alert logs for correlation and investigation, and enables the population of custom URL lists and file hash lists for threat protection.

IGEL, a global leader in end user computing, provides IGEL OS, the secure endpoint OS for now and next — a lean, efficient, endpoint device operating system that protects endpoints from ransomware and other cybersecurity threats, simplifies endpoint management, and extends the life of existing hardware to improve TCO and sustainability.

IGEL, a secure operating system provider, creates a contained and protected system for other software solutions to run on, including the Netskope client with minimal risk to and maximum stability of the host.

Illumio, the Zero Trust Segmentation Company, stops breaches and ransomware from spreading across the hybrid attack surface. The Illumio ZTS Platform visualizes all traffic flows between workloads, devices, and the internet, automatically sets granular segmentation policies to control communications, and isolates high-value assets and compromised systems proactively or in response to active attacks. Illumio protects organizations of all sizes, from Fortune 100 to small business, by stopping breaches and ransomware in minutes, saving millions of dollars in application downtime, and accelerating cloud and digital transformation projects.

Infinipoint is the first to offer Device-Identity-as-a-Service, extending a Zero Trust security posture to devices. Infinipoint complements Netskope by integrating device state, risk-based policies and one-click remediation for non-compliant devices.

Integration Story
Infinipoint’s device identity-as-a-service integration with Netskope and its global security private cloud allows it to detect whether or not the Netskope client is present, along with looking at a number of other settings as part of a posture check during login to an identity or service provider, or at a pre-set interval during live Internet use. It can prompt a user to download the Netskope client or make other changes to make the endpoint device compliant before accessing risky resources. Finally, Infinipoint can trigger device classification changes within Netskope to enable the enforcement of a nuanced, continuous control framework that dials in cloud activities to the real-time posture of the device.

Infoblox unites networking, security and cloud to form a platform for operations that’s as resilient as it is agile. We seamlessly integrate, secure and automate critical network services so businesses can move fast without compromise.

Integration Story
The integration between Netskope Device Intelligence and Infoblox strengthens an organization’s security posture by merging detailed device context with robust network control. Netskope’s Device Intelligence provides comprehensive information about devices, including their identity, behavior, and risk profiles, while Infoblox’s DDI solutions offer crucial network data like DNS, DHCP, and IP address management. By combining these capabilities through Netskope’s Device Intelligence Exchange, organizations gain enhanced visibility into network activity and can implement more granular security policies. This integration facilitates automated security tasks, reducing manual intervention and improving efficiency. Furthermore, it enables dynamic network segmentation and device grouping based on risk profiles, effectively limiting the lateral movement of threats.

Intralinks helps liberate people, businesses and organizations to do more, wherever they are, through absolute control over their high-value information. It provides an innovative platform that enables safe, secure and compliant enterprise content collaboration within and across enterprises.

Integration Story
Netskope has the ability to securely enable real time interactions with data at rest in Intralinks.

Ivanti unites IT and security, empowering Everywhere Work with the first purpose-built platform for CIOs and CISOs. The Ivanti platform is powered by Ivanti Neurons – a cloud-scale, intelligent hyper automation layer that enables proactive healing, user-friendly security across the organization, and provides an employee experience that delights users.

The API integration with Neurons for ITSM and allows customers to select critical alerts and map important fields into existing workflows, reducing the need to pivot between systems.

Benefits:

• Automated Ticketing: Programmatically open and manage tickets on Ivanti Neurons for ITSM, streamlining workflow processes.
• Seamless Integration: Turn Netskope-discovered issues (e.g., policy, malware, DLP) into actionable tickets within Ivanti Neurons for ITSM, with incident status accurately reflected.
• Improved Efficiency: Simplifies the incident response process by eliminating manual ticket creation and status synchronization, ensuring the right information is delivered at the right time.

Jamf’s purpose is to simplify work by helping organizations manage and secure an Apple experience that end users love and organizations trust. Jamf is the only company in the world that provides a complete management and security solution for an Apple-first environment that is enterprise secure, consumer simple and protects personal privacy.

Integration story
Jamf tracks not only information about the device like device name, OS running, and which version of OS software, but it also includes information about the user and risk level of the device. Netskope’s Cloud Exchange is able to bring this information in and use this user risk information to augment the Netskope user’s risk score (UCI) within Netskope. Real time policies can be used to restrict access of risky users to key corporate resources or pop-up a coaching notification to help the user know why they are being restricted.

Josys is the SaaS & Device Management Platform that simplifies how IT works. Our holistic approach equips IT with 360o control over their SaaS applications and device inventory by making it easier to visualize user access, analyze utilization trends, and automate provisioning processes that will make IT operations run more efficiently. Learn more at Josys.com.

Integration Story
Josys has integrated data from Netskope’s Cloud Confidence Index within its SaaS Management platform to provide IT administrators with objective insights into the risk level and audit-ability of apps that employees are using across their organization. This data can be used to efficiently prioritize, manage, and mitigate risks associated with shadow IT.

JumpCloud^® helps IT teams and managed service providers (MSPs) Make Work Happen^® by centralizing management of user identities and devices, enabling organizations to adopt Zero Trust security models.

Integration Story
With JumpCloud SAML SSO and Netskope, you can give your users convenient but secure access to all their web applications with a single set of credentials. Automatically provision, update and de-provision users and groups in Netskope from JumpCloud using the Identity Management (SCIM) integration. Leverage this integration to centralize user lifecycle, user identity, and group management in JumpCloud for Netskope. Save time and avoid mistakes, as well as potential security risks, related to manually creating users.

Juniper Networks challenges the status quo with products, solutions and services that transform the economics of networking. Their team co-innovates with customers and partners to deliver automated, scalable and secure networks with agility, performance and value. Netskope integrates with Juniper Sky Advanced Threat Prevention (ATP) to protect organizations against cloud threats and malware to ensure comprehensive coverage across on premises and remote users.

Integration Story
Netskope integrates with Juniper Sky ATP sandbox. Netskope sends suspicious files for sandbox detination and enforces based on Juniper Sky ATP verdict.

Kandji is device management (MDM) and security built specifically to meet the unique needs of the Apple platform, with advanced endpoint detection and response optionally delivered through a single unified agent. Kandji is a modern, cloud-based solution to centrally manage and secure your Mac, iPhone, iPad, and Apple TV devices, saving IT teams countless hours of manual, repetitive work with features like one-click compliance templates and 150+ pre-built automations, apps, and workflows.

Integration Story
Kandji can deploy and manage the Netskope security client on Windows and MacOS.

KnowBe4 directly ingests Netksope alerts to inform individual risk scores via the Netskope Cloud Exchange Cloud Risk Exchange (CRE) module and shares these risk scores with Netskope. Also, KnowBe4 directly ingests Netksope alerts to trigger training enrollment and inform individual risk score calculations.

Kriptos uses AI to classify and label millions of documents automatically in an incredibly short time. We customize and train our algorithms specifically for your company ensuring great precision rates. Kriptos saves you time by completely replacing human effort and it is compatible with any DLP and CASB solutions. Detect documents with personal data, credit card information and determine their sensitivity levels by analyzing 100% of your information in local discs, servers and cloud.

Integration Story
Netskope has enabled Kriptos to test its AI-based data classification engine against Netskope to determine if Netskope can read its tags. They can also scan documents in a attached USB device.

LeanIX, an SAP company, is a market leader for enterprise architecture management (EAM), driving the modernization of IT landscapes and continuous business transformation. LeanIX and Netskope’s integrated solution enables organizations to achieve complete visibility into their SaaS landscape and leverage continuous insights to make informed decisions for effective application portfolio management.

Integration Story
Netskope provides visibility and real-time data and threat protection when accessing cloud services, websites, and private apps.

Living Security leads the Human Risk Management category, transforming fragmented signals into adaptive defense through its Unify platform. By correlating behavior, identity, and threat data, it delivers 3X more visibility and reduces human cyber risk by over 90%. Trusted by global enterprises, Living Security turns awareness into measurable action and impact.

The partnership between Living Security and Netskope integrates behavioral, access, and threat data—such as web traffic, cloud app usage, shadow IT, and GenAI activity, directly into Living Security’s Human Risk Management Unify platform for a richer, more complete picture of human risk. This collaboration not only enables smarter, real-time interventions like nudges or GenAI training, but also supports bi-directional policy enforcement, allowing Human Risk Intelligence (HRI) scores to directly inform Netskope controls. The result is a more adaptive and intelligent approach to human risk that drives better security outcomes and operational efficiency across the business.

LogRhythm is a world leader in NextGen SIEM, empowering thousands of enterprises on six continents to successfully reduce cyber and operational risk by rapidly detecting, responding to and neutralizing damaging cyberthreats. LogRhythm’s technology helps customers measurably secure their cloud, physical, and virtual infrastructures for both IT and OT environments.

To learn more, please visit logrhythm.com.

Integration Story
LogRhythm ingests, normalizes, and parses alert, event, and web transaction logs sent by the Netskope Cloud Exchange Cloud Log Shipper (CLS) module.

Lumos is the world’s first Autonomous Identity Platform that helps organizations manage and secure identities and applications at scale. By answering the question “who has access to what”, the Lumos platform provides complete visibility into employee access and drives dynamic enforcement of the right access, to the right users, at the right time, using AI-powered intelligence.

Integration Story
The Netskope integration in Lumos provides granular details on users and roles. Conduct User Access Reviews and manage RBAC within Netskope to improve security posture and ensure compliance.

Lumu is a cybersecurity company focused on helping organizations of all sizes and verticals automate network threat detection and response. Lumu has built a powerful closed-loop, self-learning solution that helps security teams accelerate compromise detection, gain real-time visibility across their infrastructure, and close the breach detection gap from months to minutes. Lumu is unique in its ability to show security teams exactly what is happening with rich incident context. The solution reports the type of attack, the assets involved, and how the organization is affected. This allows for facilitating the prioritization of incident remediation. Through its unique integration capabilities, Lumu is able to work with existing cybersecurity tools, like Netskope, to automate real-time incident response.

Integration Story
Lumu ingests Netskope web transaction logs and responds by populating custom URLs for destination filtering.

Micro Focus delivers enterprise software to empower our 40,000 customers worldwide to digitally transform. With a broad portfolio, underpinned by a robust analytics ecosystem, the company enables customers to address the four core pillars of digital transformation— Enterprise DevOps; Hybrid IT Management; Security, Risk & Governance; and Predictive Analytics.  By design, these tools bridge the gap between existing and emerging technologies, so customers can run and transform at the same time.

Microsoft Corporation is the worldwide leader in software, services, devices, and solutions that help people and businesses realize their full potential. Netskope, as a Gold Cloud Productivity partner, a Gold Enterprise Mobility Management partner and a certified Microsoft Teams partner, works closely with Microsoft and utilizes Microsoft APIs and inline defenses to provide data and threat protection to the Netskope for Office 365 suite of applications, including Microsoft Teams, OneDrive, Sharepoint and Outlook.

Mimecast (NASDAQ: MIME) was born in 2003 with a focus on delivering relentless protection. Each day, we take on cyber disruption for our tens of thousands of customers around the globe; always putting them first, and never giving up on tackling their biggest security challenges together. We are the company that built an intentional and scalable design ideology that solves the number one cyberattack vector – email. We continuously invest to thoughtfully integrate brand protection, security awareness training, web security, compliance and other essential capabilities. Mimecast is here to help protect large and small organizations from malicious activity, human error and technology failure; and to lead the movement toward building a more resilient world. Learn more about us at www.mimecast.com.

Miro’s Innovation Workspace enables teams to get from idea to outcome faster. Its intelligent canvas is where teams get work done, with AI-powered tools for communicating complex concepts, planning work and collaborating to make decisions quickly. Teams can co-create presentations, documents, diagrams, and designs while seamlessly communicating through video walkthroughs, comments, and meetings. Miro integrates with over 150 apps and offers enterprise-grade security controls. Customizable templates and purpose-built apps help teams kickstart their work. Whether they are building new services and products, designing and optimizing technical systems and processes, or running large-scaled business transformations – it all gets done in Miro’s collaborative platform for innovation.

Integrate Miro with Netskope to enhance data security. The work done on Miro is strategic and requires governance and protection; this includes product roadmaps, product mockups, financial forecasting, architecture diagrams. Miro Enterprise Admins can leverage the Netskope to prevent data leakage and visualize attempted board downloads to desktop.

MobileIron is the security backbone for the digital enterprise, protecting corporate data across apps, networks, and clouds. The MobileIron Access integration with Netskope provides enterprises with conditional access to cloud services from mobile apps, using unique device and app posture feeds, along with user identity to make access control decisions.

Okta is an integrated identity management and mobility service that securely and simply connects people to their applications from any device at any time. Netskope and Okta come together to provide unparalleled visibility and control of sanctioned and unsanctioned cloud apps.

OneLogin is the innovator in enterprise identity management and provides the industry’s most comprehensive solution for managing user identities in the cloud and behind the firewall. Netskope and OneLogin’s integrated solution enables organizations to achieve precise visibility, and granular control based on contextual device and user identity information.

Integration Story
OneLogin integrates with Netskope for SAML, WS-FED authentication as well as for SCIM user and group provisioning and MFA workflows.

OpenAI empowers organizations by providing advanced AI technologies that enhance productivity, streamline operations, and foster innovation. OpenAI integrates its cutting-edge language models with various platforms, offering solutions that include conversational AI, automated content creation, and data analysis. Netskope enables the secure and compliant use of ChatGPT and other GenAI models.

With the Netskope One platform, safely enable the use of generative AI applications with application access control, real-time user coaching, and best-in-class data protection.

Specifically for ChatGPT Enterprise customers, leverage API-enabled controls to bolster security and compliance, allowing joint customers to adhere to compliance standards, advance detection and safeguard sensitive data, and protect against advanced threats.

Phylum is an automated, security-as-code platform that provides continuous visibility into software supply chain risks, blocks zero-day attacks, and enforces compliance and governance without disrupting innovation. Phylum analyzes open-source software as it is published, and ingests software packages, lockfiles and SBOMs to contextualize risks, prevent threats and inform developers and security teams based on an organization’s custom risk policy settings.

Integration Story
Phylum can be integrated with Netskope to alert organizations if they have been impacted by software supply chain attacks or malicious code downloaded from the open-source ecosystem. Customers can incorporate Phylum’s curated list of malicious open-source package hashes into a Netskope security policy.

Ping Identity, the leader of Identity Defined Security, protects the most critical assets for some of the world’s largest enterprises, all while enabling secure access to any application from any device. Netskope and Ping provide an integrated solution that ensures unmatched cloud app security and compliance, featuring intelligent remediation workflows.

Integration Story
PingFed, PingOne, and Ping Access integrate with Netskope for SAML, WS-FED authentication as well as for SCIM user and group provisioning and MFA workflows.

The Portal26 Enterprise GenAI adoption platform is an essential infrastructure for enterprises to successfully manage, monitor, and measure their GenAI program. Our customers gain rich visibility into usage while mitigating risks associated with compliance, IP, and privacy. Portal26 uniquely supports audits and detailed rear-view forensics, a critical gap in enterprise AI infrastructure. Additionally, Portal26 supports employee education through usage-based policy distribution and learning materials. Boards and business leaders rely on Portal26 to understand how GenAI impacts their organizations; IT and security teams leverage robust security and forensics controls; compliance, risk and legal teams also rely on Portal26 to provide critical reporting and audit functionality. To learn more, go to Portal26.ai.

Integration Story
Portal26 uses GenAI application session information and insights captured by Netskope Cloud TAP to access prompt information, enabling in-depth analytics on your organization’s use of these tools.

Rapid7 is advancing security with visibility, analytics, and automation delivered through our Insight cloud. Our solutions simplify the complex, allowing security teams to work more effectively. InsightIDR, Rapid7’s cloud SIEM, cuts through complexity and noise to accelerate detection and response with reliable alerts, high-context investigations, and automation.

Integration Story
Netskope sends log data (all) to Rapid7 for pasring and ingestion. Netskope sends logs to InsightIDR. Rapid7 in turn turns these into User Behavior Analytics (UBA) alerts. Rapid7 can also send Netsokpe threat indicators from the logs that they correlate.

ReliaQuest exists to Make Security Possible, allowing security teams to detect, contain and respond to threats within minutes—anytime, anywhere. Our GreyMatter platform empowers enterprise security teams to leverage their current or future technology stack to drive greater visibility and automation without the need to centralize data or standardize tools. Built on over a decade of experience, ReliaQuest is the only cybersecurity technology company at scale, at the enterprise, that provides optionality and modularity—making the customer the platform. “ReliaQuest GreyMatter is a tech-agnostic security operations platform that unifies security tools and workflows to deliver comprehensive threat detection, investigation, and response (TDIR) capabilities enhanced by artificial intelligence.

GreyMatter seamlessly integrates with Netskope, enabling real-time alert ingestion without data migration. This integration empowers security teams to enrich investigations, conduct threat hunting, and execute response actions directly through GreyMatter’s unified interface. With AI-assisted investigation capabilities, security teams can rapidly analyze Netskope alerts alongside other security telemetry, accelerating threat detection and response while maximizing the value of existing security investments.”

Revelstoke is the only Next Level Security Orchestration, Automation, and Response (SOAR) solution built on a Unified Data Layer that offers no-code automation and low-code customization. Revelstoke empowers CISOs and security analysts to automate analysis, eliminate software development needs, optimize workflows, prevent vendor locks, scale processes, and secure the enterprise. Learn more at https://revelstoke.io.

The RSA NetWitness Platform is an advanced SIEM that uses behavioral analysis, data science techniques, and threat intelligence to help security teams detect and resolve both known and unknown attacks. The Netskope partnership with RSANetWitness provides analysts with deep visibility into an organization’s SaaS, IaaS, and web use for comprehensive reporting, incident management, and threat analysis.

Integration Story
SecureAccess from RSA allows a Netskope policy to invoke a function in response to user alerts to force user reauthentication of the Cloud Authentication Service users via RSA’s MFA. The integration currently supports Token/OTP or Approve/PUSH-notify notifications back to SecureID to revalidate the user and allow their suspended session to continue.

Rubrik’s Zero Trust Data Security™ helps organizations achieve business resilience against cyberattacks, malicious insiders, and operational disruptions. Rubrik Security Cloud, powered by machine learning, secures data across enterprise, cloud, and SaaS applications.

Integration Story
Netskope’s integration with Rubrik allows you to enhance your threat hunting capabilities. By sharing MD5 and SHA256 threat indicators from Netskope to Rubrik’s Threat Hunt page, you can proactively initiate threat investigations within Rubrik.

Combining the mindset of a CISO and the toolset of a hacker, SafeBreach is the pioneer in breach and attack simulation (BAS) and is the most widely used continuous security validation platform. SafeBreach continuously executes attacks, correlates results to help visualize security gaps, and leverages contextual insights to highlight remediation efforts. With its Hacker’s Playbook™️, the industry’s most extensive collection of attack data enabled by state-of-the-art threat intelligence research, SafeBreach empowers organizations to get proactive about security with a simple approach that replaces hope with data.

Integration Story
Safebreach can demonstrate the effectiveness of Netskope to reduce the attack and breach surface at a joint customer.

SailPoint is the leading provider of enterprise identity governance solutions. We empower our customers to efficiently and securely govern the digital identities of employees, contractors, and business partners and manage their constantly changing access rights to enterprise applications and data. Our open identity platform, delivered both on-premise and in the cloud, provides organizations with critical visibility into who currently has access to which resources, who should have access to those resources, and how that access is being used.

Integration Story
SailPoint’s solution enables joint customers to leverage their single dashboard into user application/environmental access and behavior to determine and manage degrees of compliance with corporate use policies. Netskope is a signed member of its Identity+ technology partner program. With the IdentityIQ (v.7.3 or higher) released in 2019, SailPoint’s IdentityIQ can aggregate Netskope-specific alerts (i.e. violations) into a table for quick audits and take alerts into account when calculating each user’s independent risk score. SailPoint can create alerts based on non-compliant, high-risk activities which will ideally trigger GRC audits. SailPoint has also built a plugin view to display all alert ‘sources’ from Netskope and can visually map these to Identity Application definitions. There are four governance actions based on Netskope alerts. These are meant to ship with the plugin as ‘blueprint’ examples; they can be improved or augmented in the field and include: a sample Single-identity certification, a sample Active Directory group move (putting user into a quarantine group), a sample disabling of all users accounts, and a sample that creates an IdentityIQ policy violation

Salesforce is the world’s #1 CRM solution. Netskope for Salesforce enables businesses to be more efficient and flexible, while maintaining the visibility and security controls needed to protect sensitive data, prevent data loss and ensure compliance with internal and external regulations.

Integration Story
Netskope findings for Netskope and Salesforce customers (API) can be surfaced in a compliance report installed from AppExchange and accessed from within the Salesforce dashboard. The app is also needed to enable SFDC features that the Netskope API protection solution requires in order to function properly.

Savvy enables CISOs and security pros to support the safe adoption and use of enterprise SaaS apps by providing just-in-time security guardrails that enable users to make smarter decisions and automate security workflows that orchestrate the response to various events.

Integration Story
Savvy enables CISOs and security pros to support the safe adoption and use of enterprise SaaS apps by providing just-in-time security guardrails that enable users to make smarter decisions and automate security workflows that orchestrate the response to various events.

SealPath is a European leader in Enterprise Digital Rights Management. The solution makes it easy to avoid costly data breaches, ensure security for confidential information, and protect data assets. They have protected their clients’ data for over a decade, working with major companies in more than 25 countries.

With the integration between Netskope and SealPath, we can ensure the security of the entire data lifecycle, enabling classification, labeling, encryption, granular control, and visibility from Netskope.

SecLytics Augur is the only Predictive Extended Detection & Response (pXDR) platform that combines TIP, SIEM, and SOAR functionalities to create a unified, streamlined SOC workflow. Powering Augur is our unique, patented predictive intelligence technology, which identifies the build-up of attack infrastructure and predicts attacks on average 50 days before they occur.

Integration Story
SecLytics sends threats to Netskope via the CTE modules for a unilateral integration. (from them to us)

SecureAuth is an adaptive access control and authentication solution built to verify identities across VPN, on-premises, cloud, mobile, and homegrown applications. Netskope and SecureAuth work together to provide contextual access controls and authentication so that your employees can work securely across cloud apps.

Integration Story
Secureauth integrates with Netskope for SAML,WS-FED authentication as well as for SCIM user and group provisioning and MFA workflows.

SecurityScorecard is the global leader in cybersecurity ratings, with more than 12 million companies continuously rated. SecurityScorecard’s patented security ratings technology is used by organizations for enterprise risk management, third-party risk management, board reporting, due diligence, cyber insurance underwriting, and regulatory oversight.

SecurityScorecard and Netskope work together to mutually enrich each other’s security and risk posture data. By integrating SecurityScorecard and Netskope, organizations can make more informed policy and access decisions based on risk and threat intelligence associated with their SaaS applications. Adding SecurityScorecard data to the Netskope Cloud Exchange (CE) provides customers with powerful insight into their security posture and that of their SaaS applications. The two companies are bi-directionally sharing critical risk and threat information between SecurityScorecard, Netskope Cloud Threat Exchange (CTE), and Netskope Application Risk Exchange (ARE) workflow within its Cloud Risk Exchange (CRE) module.

Securonix is redefining the next generation of cyber-threat detection using the power of entity context, machine learning, and big data. Their purpose-built security analytics platform enriches, analyzes and scores events into actionable intelligence. Using machine learning techniques, Securonix detects insider threat, cyber threat and fraud attacks in real-time. The SNYPER Securonix platform has been configured to ingest, parse, and understand Netskope events via API to help joint customers correlate cloud usage within their entire security and IT ecosystems.

Integration Story
Securonix built an on-prem connector to directly ingest Netskope events, alerts, and web transaction logs. Following a successful deployment, the connector makes data from a datasource available to query and view in the SNYPR application. The instructions in the deployment guide linked below describes how to deploy Netskope Logs in the SNYPR application.

Secureworks is a global cybersecurity leader that protects customer progress with Secureworks® Taegis™, a cloud-native security operations and analytics platform built on 20+ years of real-world threat intelligence and research, improving customers’ ability to detect advanced threats, streamline and collaborate on investigations, and automate the right actions.

Integration Story
Secureworks Taegis XDR can ingest and normalize Netskope SSE event data with speed and agility, from any device or location. The integration extends the open XDR concept all the way to the service edge, bringing a unified, multi-layered defensive stack and practical value to security operations. With Secureworks and Netskope solutions working together, enterprises benefit from fast, reliable networking, with complete zero trust security to support cloud services and hybrid workforces with superior threat detection, unmatched response, an open-without-compromise architecture, and a higher return on investment.

Sekoia.io is the European cybersecurity technology company, leading provider of Extended Detection and Response (XDR) solutions based on Cyber Threat Intelligence (CTI). Its mission is to provide businesses and public organizations with the best protection technologies against cyber attacks.

Integration Story
The seamless integration between Netskope and Sekoia XDR / SOC platform drastically increases the detection and the response capabilities of the modern SOC teams.

SentinelOne delivers autonomous endpoint protection through a single agent that successfully prevents, detects, responds, and hunts attacks across all major vectors. Leveraging patented Behavioral AI, the SentinelOne platform covers IoT devices as well as cloud and container workloads in addition to endpoint capabilities.

Integration Story
SentinelOne’s XDR platform extracts alerts logs from Netskope for automated correlation and to facilitate incident response inside their platform. SentinelOne also extracts Netskope User Confidence Index (UCI) scores for higher fidelity incident response triggers. SentinelOne also exchanges indicators of compromise (IoCs) of all types with Netskope.

ServiceNow makes work better across the enterprise. Getting simple stuff done at work can be easy, and getting complex multi‑step tasks completed can be painless. Our applications automate, predict, digitize and optimize business processes and tasks, across IT, Customer Service, Security Operations and Human Resources, creating a better experience for your employees and customers while transforming your enterprise. Netskope protects your sensitive business data while ensuring compliant usage of ServiceNow.

Integration Story
Netskope works with ServiceNow as an application and ISV platform to inspect ServiceNow transactions, settings within ServiceNow, and data stored within ServiceNow, and to integrate and share telemetry with and in ServiceNow, making it easier for security professionals to respond quickly to protect business assets.

Siemplify, the leading independent security orchestration, automation and response (SOAR) provider, is redefining security operations for enterprises and MSSPs worldwide. The Siemplify platform is an intuitive workbench that enables security teams to manage their operations from end to end, respond to cyber threats with speed and precision, and get smarter with every analyst interaction. Visit us at www.siemplify.co or follow us on Twitter @Siemplify. 

Learn more

Slack is a workplace collaboration tool designed for streamlined communication across teams. Netskope for Slack helps secure your organization’s sensitive data with advanced, enterprise DLP and provides access controls and security policies so your employees can be productive while staying secure and compliant.

Integration Story
Netskope has the ability to secure and integrate with slack, as well as an ISV partner. Netskope can inspect data inside Slack channels for data protections, and Netskope can create notifications inside slack when alerts need to be surfaced for teams to collaborate.

Sophos, a global leader in innovating and delivering cybersecurity as a service. Our Managed Detection and Response (MDR) offering is a fully managed 24/7 service delivered by experts who detect and respond to cyberattacks targeting your computers, servers, networks, cloud workloads, email accounts, and more. With over 18,000 customers who trust us and use the product, Sophos is the largest MDR provider globally.

Integration Story
Sophos and Netskope bilaterally share threats via the CTE module.

Netskope App For Splunk allows a Splunk Enterprise administrator to integrate with the Netskope API and pull security events from the leader in cloud security. Our platform helps organizations understand online activities, protect data, stop threats, and respond to incidents. Our technology add-on allows for the seamless integration of security events into Splunk Enterprise security workflows.

Integration Story
Netskope maintains 3 integrations with Splunk. The Netskope app for Splunk, which displays Netskope data inside the Splunk platform in a GUI format. The second, Netskope maintains a technology add-on, which allows Splunk to ingest, parse, normalise and search on all Netskope data including client logs, alerts logs, and web transactions. The technology add-on supports adaptive orchestration, and includes IoC sharing, moving a user to a diff group inside Netskope for a different policy enforcement.

StealthMole is a leading Deep and Dark web intelligence provider, specializing in threat monitoring and cybercrime investigations. With access to over 4 petabytes of data, we deliver actionable insights to help organizations detect risks, trace threat actors, and strengthen security strategies. Our solutions support a wide range of industries, enabling proactive defense against cyber threats. By turning hidden Dark web data into intelligence, StealthMole empowers users to stay ahead in an ever-evolving digital threat landscape.

Integration Story
StealthMole CRE monitors the Deep and Dark web (DDW) for data leaks, with a primary focus on compromised credentials from malware-infected devices. Updated daily, StealthMole provides businesses with crucial insights into data breaches that have evaded security protocols, offering a near real-time overview of at-risk credentials. This enables quick and efficient responses to protect corporate assets and sensitive information. The current version of StealthMole CRE provides User record of compromised emails, passwords, and the originating leak source URL.

Stellar Cyber Open XDR platform delivers comprehensive, unified security without complexity, empowering lean security teams of any skill to secure their environments successfully.

Integration Story
Stellar Cyber ingests Netskope alerts and can trigger moving the user to a different group or can populate custom URLs for destination filtering.

Sumo Logic is the leading cloud-native, machine data analytics platform, that delivers real-time, continuous intelligence across the application lifecycle and stack.

Integration Story
Sumo Logic directly ingests Netskope events, alerts, and web transaction logs.

Swimlane is a leader in security orchestration, automation, and response (SOAR). By automating time-intensive, manual processes and operational workflows and delivering powerful, consolidated analytics, real-time dashboards and reporting from across your security infrastructure, Swimlane maximizes the incident response capabilities of over-burdened and understaffed security operations.

Integration Story
Swimlane ingests Netskope events and alerts, and can trigger moving the user to a different group, or can populate custom URLs for destination filtering, or sharing malicious file hashes for threat protection.

In the cloud, every second counts. Sysdig stops cloud attacks in real time by instantly detecting changes in risk with runtime insights and open source Falco. We correlate signals across workloads, identities, and services to uncover hidden attack paths and prioritize the risks that matter most. Sysdig. Secure Every Second.

Sysdig integrates with Netskope to correlate user engagement with cloud activity to enable a continuous, trust-based security enforcement policy and provide enhanced protection for users, apps, and data.

Tanium is the platform that over half the Fortune 100 trust to gain visibility and control across all endpoints. Our approach gives IT operations, security and risk teams confidence to manage, secure and protect their networks at scale. See and control every endpoint, everywhere. That’s power of certainty.

Integration Story
Tanium and Netskope developed a three part integration for Windows and MacOS hosts that is available within all Tanium customer’s CORE product’s integration library. There are three use cases built out for use in the Tanium library of sensors/packages: 1) confirm and report on endpoints running/not running Netskope client and install/get it running as necessary 2) utilize a (sample, but modifiable) sensor package to look to see if the endpoint is matching, and therefore “managed” or not and 3) create a file named “ managed” in the Netskope client folder and stop/start the client to force device classification. This means configuring device classification to look for those settings and using it in policy. Configuration is enabled in Tanium, and it is a custom sensor/package installable by any Tanium customer.

TEHTRIS is the trusted partner that automatically detects and neutralizes cyber espionage and cyber sabotage, for any organization, ​in real time without human action thanks to the XDR AI platform, a “all-in-one” protection that monitors security of any data point including robust and reliable threat intelligence, sandboxes, integrated SOAR with pre-defined playbooks.

Integration Story
The integration provides technical teams with further efficiency and better management via a holistic view of cybersecurity events between endpoint, applications and network from a single platform. Benefits include optimising threat investigation time, and reducing false positives.

Built by security practitioners, Tines is a powerful automation platform that enables security teams to focus on high-impact work. Tines bypasses the need for technical skills and delivers powerful automation straight into the hands of security teams. Tines connects every tool in your workflow in one place.

Integration Story
Tines reads Netskope alerts and can add or upend URLs to the custom URL list.

TITUS solutions enable organizations to classify, protect and confidently share information, and meet regulatory compliance requirements by identifying and securing unstructured data. Netskope and TITUS enhance secure collaboration and data loss prevention for sensitive information in emails, documents and other file types – no matter the cloud app, user, device or location.

Integration Story
The Netskope XD engine interoperates with documents classified/watermarked/modified by Titus in order to obtain a lower false positive/negative rates when identifying DLP violations. XD uses its existing set of DLP match rules to look for these markings.This works for all use cases except files created in Google that TITUS could marks using their Beta’d version for direct integration with G-Suite. Additionally, marking files in this fashion enables TITUS’s own integrations with Vera and Virtru to better identify files requiring IRM encryption. Finally, TITUS data classification allows Netskope DLP policy to fire in a similar manner to policy on endpoint DLP engines like Digital Guardian’s when they, too, use the same DC markings. Help Systems purchased TITUS in early 2020.

ThreatQuotient’s mission is to improve the efficiency and effectiveness of security operations with a platform that accelerates and simplifies investigations and collaboration within and across teams and tools. Integrating an organization’s existing processes and technologies into a unified workspace, ThreatQuotient’s solutions reduce noise, highlight top priority threats and automate processes to provide greater focus and decision support while maximizing limited resources. ThreatQuotient’s threat-centric approach supports multiple use cases including incident response, threat hunting, spear phishing, alert triage and vulnerability management, and also serves as a threat intelligence platform. ThreatQuotient is headquartered in Northern Virginia with international operations based out of Europe and APAC.

Integration Story
ThreatQuotient and Netskope bilaterally share threats via the Netskope Cloud Threat Exchange (CTE) module.

Torq is your security product’s favorite security product. Torq’s AI-driven enterprise-grade security hyperautomation platform unifies and automates the entire security infrastructure to deliver unparalleled protection and productivity. Torq drives maximum value and efficiency from existing security investments. It supercharges security teams with powerful, easy-to-use no-code, low-code, and full-code workflows that reduce manual tasks, freeing security professionals to focus on higher-value strategic activities.

Integration Story
Trellix Helix threat intelligence platform ingests Netskope alerts, correlates with other data sources, and surfaces high risk IOCs and sends it back to Netskope via the Cloud Threat Exchange (CTE) module for threat protection.

Trend Micro Vision One is a purpose-built threat defense platform that provides added value and new benefits beyond XDR solutions, allowing you to see more and respond faster. Providing deep and broad extended detection and response (XDR) capabilities that collect and automatically correlate data across multiple security layers—email, endpoints, servers, cloud workloads, and networks—Trend Micro Vision One prevents the majority of attacks with automated protection.

The integration with Netskope improves customers’ overall threat prevention posture by providing near, real-time updates and intelligence of Suspicious Objects (IOC) data from Trend Micro Vision One into Cloud Threat Exchange allowing immediate blocking against malicious traffic on a customer’s system.

Integration Story
Trend Micro and Netskope bilaterally share threats via the CTE module.

TruU delivers the most comprehensive end-to-end passwordless identity platform, addressing the challenges of traditional authentication methods. Our solution supports a broad range of enterprise systems requiring authentication, including Windows and Mac workstations, applications, VDI, VPN, and physical security systems. Trust TruU to enhance your enterprise security and streamline user access in a constantly evolving digital landscape.

Integration Story
Netkope and TruU partner to provide passwordless access to Netskope protected resources. By combining Netskope’s comprehensive threat protection with TruU’s seamless, adaptive authentication capabilities, the joint solution enhances security posture, improves user experience, and reduces operational complexities.

Vera’s next-generation data security enables businesses to secure, track and control content shared through the cloud. With robust policy enforcement, strong encryption and strict access controls, Vera lets employees collaborate freely while ensuring the highest levels of security, visibility and control through the last mile.

Integration Story
Netskope leverages the Vera SDK to enable the tenant to act as a Vera endpoint, modifying files for IRM policy enforcement by the Vera service. Vera encrypted files stored in Google Drive (not Google native files), Box, Dropbox, and OneDrive are sent by Netskope to the Vera SDK and opened for scanning and policy enforcement. Files requiring encryption are sent to, or returned from, the SDK for rights based encryption and tagging so that subsequent users access those files will have to check into Vera, validate their access in real time, and then gain the key to open the file. Note that Netskope can override IRM settings configured by the original creator based upon DLP findings once that file is scanned at rest.

Versa Networks, the leader in Secure SD-WAN and SASE, combines full-featured SD-WAN, complete integrated security, advanced scalable routing, genuine multitenancy, and sophisticated analytics both on-premises and in the cloud to meet WAN Edge and SASE requirements for small to extremely large enterprises and Service Providers. Versa Secure SD-WAN and Versa SASE are available on-premises, hosted through Versa-powered Service Providers, cloud-delivered, and via the simplified Versa Titan cloud service designed for Lean IT. Thousands of customers globally with hundreds of thousands of sites trust Versa with their networks, security, and clouds.

To learn more, please visit https://versa-networks.com.

Integration Story
Versa establish a VPN tunnel from Versa SD WAN appliances to send traffic to Netskope for inspection and enforcement.

VISO TRUST is a leading AI-driven third-party cyber risk management (TPRM) company. today announced its latest integration with Netskope, the platform that is redefining cloud, data, and network security to help organizations apply zero trust principles to protect data. This groundbreaking collaboration aims to empower VISO TRUST customers with a comprehensive and streamlined approach to managing third-party cyber risks arising from shadow IT vendors.

Integration Story
The integration empowers joint customers to seamlessly identify and monitor shadow IT vendors operating within their ecosystem, connecting with their environment or interacting with their users. By leveraging Netskope’s advanced cloud security capabilities, VISO TRUST users can efficiently detect unauthorized applications and services in real time, minimizing the potential for security blind spots.

VMWare leads a new era of endpoint security by enabling organizations to disrupt advanced attacks, deploy the best prevention strategies for their business, and leverage the expertise of 10,000 professionals to shift the balance of power back to security teams. VMWare and Netskope enable organizations to comprehensively expand their kill chain view and response from endpoint to cloud. The partnership closes the threat remediation loop by sharing threat intelligence between cloud to endpoint.

Integration Story
VMware and Netskope bilaterally share threats via the CTE module.

AirWatch by VMware, the leader in enterprise mobility management (EMM), provides end users with a seamless digital workspace while empowering IT with a future-proof mobility platform that manages end-to-end security of endpoints. Netskope and AirWatch deliver seamless cloud security so that you can safely enable mobility and cloud on any device, anywhere.

Integration Story
VMWARE workspace can manage a Netskope client to all managed mobile devices to ensure that a device is connected to Netskope before connecting to the Internet to access corporate-led applications and instances.

VeloCloud, now part of VMware, simplifies branch WAN networking by automating deployment and improving performance over private, broadband Internet and LTE links for today’s increasingly distributed enterprises. VMware SD-WAN by VeloCloud includes: a choice of public, private or hybrid cloud network for enterprise-grade connection to cloud and enterprise applications; branch office enterprise appliances and optional data center appliances; software-defined control and automation; and virtual services delivery.

To learn more, please visit https://www.velocloud.com.

Integration Story
VMWare SDWAN can establish a VPN tunnel from VMWare SDWAN appliances to send traffic to Netskope for inspection and enforcement.

Wiz scans every layer of the cloud to provide complete visibility, and uses its Security Graph’s context to eliminate the noise and surface the risks that matter most. Customers can then quickly identify, prioritize and remove risks across their cloud. This new approach to cloud security disrupts the agent-based security model and utilizes an agentless, API-centered approach to seamlessly scan cloud workloads. Wiz said goodbye to contextless alerts and, instead, at the heart of the product lies the Wiz Security Graph.

Integration Story
The integration takes advantage of the deep visibility that Wiz has into cloud environments and context of which exposures lead to critical attack paths and allows Netskope to enforce policy to the end user. The solution leverages Wiz Webhooks along with the Netskope platform API.

Workday is a leading provider of enterprise cloud applications for finance and human resources. Founded in 2005, Workday delivers financial management, human capital management, planning, and analytics applications designed for the world’s largest companies, educational institutions, and government agencies. Organizations ranging from medium-sized businesses to Fortune 50 enterprises have selected Workday.

Integration Story
Netskope has the ability to securely enable real-time interactions with data at rest in WorkDay.

Workplace by Facebook is a collaboration platform that connects everyone in your organization and enables them to turn ideas into action.

Integration Story
Netskope has the ability to securely enable real time interactions with data at rest in Workpalce by FB.

In today’s mobile and cloud world, securing sensitive data across SaaS, IaaS, and PaaS as part of the digital workspace experience is critical. The integration between Netskope and VMware Workspace ONE further enhances the capabilities that Workspace ONE Trust Network sets out to accomplish to reduce risk to the enterprise by safely enabling cloud usage, protecting sensitive data, and preventing or remediating modern-day cybersecurity threats.

Integration Story
WorkspaceOne intelligence center ingests alerts to trigger automated response actions for affected users and devices.

Zoom helps organization consolidate communications, connect people, and collaborate better together. Netskope integrates Borderless SD-WAN and SaaS Security Posture Management (SSPM) technologies with Zoom, providing organizations and hybrid workers with optimized connectivity and enhanced security for a performative and compliant experience.

Integration Story
Netskope’s integrations with Zoom is as a product, for Security Posture Management (SSPM). Netskope verifies that Zoom is correctly configired from a permission and securitty point of view. Netskope provides connectivity with our BWAN solution. Netskope inspects content that’s stored in Zoom for collaboration, as awell as real time inside of Zoom.

The Zylo SaaS Management platform empowers IT, software asset management, procurement, and finance teams to finally get their arms around the chaos of SaaS in order to slash costs, mitigate risk, and establish control. This is done by providing companies with a complete and continuous inventory of applications coupled with an automated system to optimize SaaS licenses and manage renewals. Zylo discovers and normalizes SaaS spend, contract, licensing, and usage data across your entire SaaS ecosystem; managed, unmanaged, and shadow IT.

Integration:
Today, Netskope cloud confidence index intelligence is leveraged in the Zylo platform to provide organizations with a comprehensive view into the risk profile of the online tools their teams rely on, helping them to better identify and mitigate the security risks inherent in their third-party SaaS applications.