§INTEGRATIONS
Native connectors into the stack you already run.
AVA reads from the systems your analysts already trust. No rip-and-replace, no new SIEM, no parallel pipeline. Every report carries an evidence trail back to the source.
Connectors by category
Detection & Response · XDR / EDR
Microsoft Defender
XDR · Microsoft
CrowdStrike Falcon
EDR · CrowdStrike
Cortex XDR
XDR · Palo Alto
TrendMicro Vision One
EDR / XDR · Trend Micro
SIEM
Microsoft Sentinel
SIEM · Microsoft
IBM QRadar
SIEM · IBM
Elastic Security
SIEM · Elastic
Trellix SIEM
SIEM · Trellix
FortiSIEM
SIEM · Fortinet
Wazuh
SIEM · open-source
SOAR
Cortex XSOAR
SOAR · Palo Alto
Threat Intelligence · CTI
RST Cloud
CTI · threat intel
VirusTotal
CTI · file & URL
AbuseIPDB
CTI · IP reputation
AlienVault OTX
CTI · open exchange
Threatmon
CTI · threat intel
ITSM & Comms
Zendesk
ITSM · ticketing
Slack
Comms · workspace
Extensible adapter pattern. Connectors listed include built-in, partner, and roadmap — a
single integration class per new source.