Cyberhaven Integrations

Connect the apps and services your teams already use, and protect sensitive data wherever it moves.

Request demo

Download datasheet

50+ integrations across seven categories

Send incidents and logs to SIEM, SOAR, and incident management

Stream incidents, events, and audit logs into your SIEM, SOAR, or AI SOC platform. Splunk, Cortex XSOAR, and ServiceNow have purpose-built integrations, and any platform that accepts a webhook works the same way.

Splunk

splunkbase.splunk.com

Cortex XSOAR

cortex.marketplace.pan.dev

ServiceNow

store.servicenow.com

Microsoft Sentinel

IBM QRadar

Tines

tines.com

Torq

kb.torq.io

ReliaQuest

Exaforce

Add identity and directory context

Build policies around the departments, roles, and groups you already maintain in your directory, and see that context when reviewing incidents.

Okta

Microsoft Entra ID

Google Workspace

PingFederate

OneLogin

JumpCloud

CyberArk

Factor in HR context

Factor departing employees, contractors, and other elevated-risk groups into risk scoring so your team reviews the incidents that matter first.

Workday

Rippling

BambooHR

HiBob

Breathe HR

Cezanne HR

Access People HR

Discover and protect data in your apps and data stores

Protect data with visibility, posture, and remediation across SaaS, PaaS, and IaaS sources, from cloud apps and object storage to databases and on-premises file shares. Cyberhaven inventories and classifies data at rest, and follows it in motion as people create and share content.

Slack

Teams

SharePoint

Google Drive

Salesforce

GitHub

Microsoft OneDrive

Gmail

Exchange Online

Box

Dropbox

Jira

Microsoft Purview

cyberhaven.com

Amazon S3

Snowflake

Azure Blob

Databricks

GCP Buckets

Microsoft SQL Server

Windows File Share

Secure AI tools

See prompts, uploads, and generated files inside the AI tools your teams use every day. Cyberhaven connects to ChatGPT Enterprise and Claude Enterprise directly, and inspects every other AI tool at the endpoint and in the browser.

ChatGPT Enterprise

Claude Enterprise

Any other browser or endpoint AI tool

Store evidence in your own cloud

Store incident screenshots, match highlighting excerpts, and other evidence in a cloud bucket you own and control. Cyberhaven retains no copies.

Amazon Web Services

Microsoft Azure

Google Cloud Platform

S3-compatible storage

Query Cyberhaven from your AI assistant

The Cyberhaven Analyst Plugin brings 50-plus prepackaged investigation and reporting skills to Claude Code, Codex, and any MCP-compatible client. Ask about incidents, users, and policies in plain English, without leaving the tool your analysts already work in.

Claude Code

Codex

Any MCP-compatible client

Data Security for the Agentic Enterprise

Cyberhaven Flow traces the full lifecycle of data and adapts protection to changing context

Agentic
Data Security

Protect AI-driven Workflows
Agentic DLP

Agentic Posture

Human
Data Security

Protect Human-driven Workflows
Human DLP

Insider Risk (IRM)

Data Security
Posture Management

Protect Data with Visibility,

Posture, and Remediation

‍across SaaS, PaaS, IaaS, and AI

Flow Platform

AI-native unified experience powered by data lineage and agentic AI:
Configuration Agents, Classification Agents, Detection Agents, and Analyst Agents