Connect third-party security tools, cloud providers, and IT services to Guard

Integrations

Security ratings platforms that score your external security posture

Security Ratings

Connect Black Kite to Guard to automatically import third-party cyber-risk assets and vulnerability findings.

Black Kite

Connect Guard to SecurityScorecard to import third-party security ratings, risk factor scores, and actionable issue findings with evidence and remediation guidance.

SecurityScorecard

Integrations Overview

Knowledge Bases

Confluence

Application Security Posture Management

Import application risks, code repository inventory, and security findings from Apiiro into the Guard Platform.

Apiiro

Import consolidated security findings from ArmorCode's application security orchestration platform into the Guard Platform.

ArmorCode

Import application assets, risk scores, and coverage gaps from Snyk AppRisk into the Guard Platform.

Snyk AppRisk

Import application security findings from Aikido Security into the Praetorian Guard Platform as risks on code repositories and domains, with automatic vendor-closure sync and optional two-way write-back.

Aikido

Application Security Testing (AST)

Burp Enterprise

Snyk DAST

Invicti

Breach Attack Simulation

Cymulate

SafeBreach

AttackIQ

Bug Bounty

Connect HackerOne bug bounty programs to Guard to import vulnerability reports as risks and program scope — including source code repositories — as seeds.

HackerOne

Cloud

Amazon Web Services (AWS)

Google Cloud Platform (GCP)

Microsoft Azure

Digital Ocean Integration

Cloud Security Posture Management

Orca Security

Connect Cortex to Guard to incorporate Cortex data into your attack surface management workflows.

Cortex Integration

Content Delivery Solutions

Akamai CDN

Fastly CDN

Fastly

Cyber Asset Attack Surface Management

Cortex Xpanse

Axonius

Avalor (Zscaler)

Censys

CyCognito

RunZero

Sevco

SharpHound

Cortex Cloud

JupiterOne

Censys ASM

Flexera

Endpoint Detection Response

CrowdStrike Falcon

Microsoft Defender Integration

ExtraHop RevealX 360

SentinelOne

Firewalls

Akamai WAF

Connect Cloudflare WAF to Guard to whitelist scanner traffic, surface WAF-protected web applications in the asset inventory, and query unprotected applications in Insights.

Cloudflare WAF

Fastly WAF

Imperva

Palo Alto Networks Panorama

Vercel WAF

AWS WAF

Connect ThreatX to Guard to automatically ingest WAF-protected hostnames and metadata into your attack surface inventory.

ThreatX WAF Integration

Identity and Access Management

Entra ID

Okta

Integrate with popular ITSM solutions such as ADO, Freshdesk, Freshservice, and JIRA

IT Service Management (ITSM)

Azure DevOps Work Items

Freshservice

Freshdesk

Linear

ServiceNow

Jira

Mobile Device Management

Microsoft Intune

Managed DNS Providers

Cloudflare DNS

NS1 Connect

Akamai DNS

GoDaddy DNS

Passive DNS Providers

DNSDB

SecurityTrails

Shodan

SaaS Security

Scan Asana projects and tasks for exposed secrets

Asana

Scan Linear issues and comments for exposed secrets

Linear (Secrets Scanning)

Notion

Scan SharePoint sites and document libraries for exposed secrets

SharePoint

Scan Slack channels and messages for exposed secrets

Slack (Secrets Scanning)

Secure Code Scanning

Connect Snyk Code to Guard to import SAST findings as vulnerabilities alongside your other application security data.

Snyk Code

Checkmarx SAST

Security Information and Event Management (SIEM)

Connect the Praetorian Guard Platform with Panther's cloud-native SIEM for consolidated threat detection.

Panther

Import Splunk Cloud security events and notable alerts into the Praetorian Guard Platform.

Splunk Cloud Platform

Cortex XSIAM

Integrate with popular source code managers such as ADO, Bitbucket, Github, and Github

Source Code Managers

Azure DevOps

Connect Guard to GitHub to discover repositories and enrich person records with GitHub identity data.

GitHub

GitLab

BitBucket

Threat Intelligence

Recorded Future

SOCRadar

Integrate with popular vulnerability scanning tools such as Qualys, Tenable, and Rapid7

Vulnerability Management (VM)

CrowdStrike Flight Control

Qualys

Nessus Professional

Tenable VM

Rapid7 InsightVM

Rapid7 Nexpose

CrowdStrike Spotlight

Connect Qualys Web Application Scanning to Guard to import web application findings into your unified attack surface.

Qualys WAS Integration

Workplace Messaging

Microsoft Teams

Zulip

Send Guard alerts to a Slack channel with an incoming webhook.

Slack Notifications

Google Chat

Overview of the Integrations page, including integration categories, configuration, integration health states, integration-suggestion prompts, and the legacy AWS integration badge.

How Guard notifies admin users of expired or invalid integration credentials at sign-in and how to resolve the prompt.

Integration Credential Alert Modal

Deliver Guard findings into your ticketing and IT service management tools, and find the full integration catalog.

Integrations & Ticketing

Get started with the Praetorian Guard Platform — your AI-powered offensive security platform

Welcome to Praetorian Guard

What is Praetorian Guard?

Quantifying enterprise risk requires examination of all the angles

Attack Surfaces

Application Attack Surface

CICD Pipeline Surface

Cloud Attack Surface

External Attack Surface

Internal Attack Surface

LLM Attack Surface

Upload an Android APK and let Guard decompile it, analyze its manifest, and file findings alongside the rest of your attack surface.

Mobile Attack Surface

Source Code Surface

User Attack Surface

Understand the core modules of Praetorian Guard: Continuous Offensive Security, Attack Surface Management, Vulnerability Management, and Breach & Attack Simulation

Platform Modules

Attack Surface Management (ASM)

Breach & Attack Simulation (BAS)

Cyber Threat Intelligence (CTI)

Penetration Testing & Application Security

The Ludacris-only product module: a counted red-team engagement per year, run by Praetorian — not a customer self-serve Attacks tab.

Red Teaming

How Guard aggregates findings from Nuclei and connected scanners into one risk inventory with a shared lifecycle, origin, and enrichment.

Unified Vulnerability Management

Praetorian's open-source Caesar-named capabilities integrated into Guard

The Caesars

Augustus is an LLM vulnerability scanner that tests AI systems for jailbreaks, prompt injection, MCP server security, and other attack techniques across a broad range of model providers.

Augustus: LLM Jail Breaking

Aurelian is an open-source, multi-cloud security reconnaissance framework that enumerates cloud resources, detects misconfigurations, finds secrets, and identifies privilege escalation paths across AWS, Azure, and GCP.

Aurelian: Multi-Cloud Security Reconnaissance

Brutus is a credential testing capability in the Praetorian Guard Platform supporting 23+ protocols, username enumeration with named results, and seamless pipeline integration.

Brutus: Modern Credential Attack Testing

How to use Constantine's autonomous vulnerability discovery and patching engine, and its code repository security analysis capability — including CVE benchmark coverage, LLM-driven entrypoint discovery, the agentic threat-hunting agent, proof-of-exploitation lifecycle tabs, build caching, and scored repository findings via the CLI and MCP server.

Constantine: Locates Fatal Security Bugs in Software & Code Repository Security Analysis

Hadrian: API Security Testing

Julius: LLM Service Fingerprinting

Nerva is Guard's network fingerprinting engine — identifying services, extracting versions, and correlating CVEs across your attack surface.

Nerva: Service Fingerprinting

Pius: Attack Surface Mapping

Titus is Praetorian Guard's purpose-built secret scanner, providing automated continuous secret discovery, validation, and on-demand credential analysis across your attack surface.

Titus: Secrets Discovery

Trajan scans GitHub Actions, GitLab CI/CD, and Azure DevOps pipelines for supply-chain and CI/CD security risks, surfacing misconfigurations, excessive permissions, and exploitable vulnerabilities — and can now run as a native GitHub Action with verification chains for confirmed findings.

Trajan: CI/CD Pipeline Attacks

Vespasian discovers API endpoints from captured traffic and generates REST, GraphQL, SOAP, and WebSocket specifications, including SPA endpoints recovered via JS static analysis in fully offline capture-once/generate-many workflows.

Vespasian: API Discovery and Specification Generation

Caligula: Software Supply Chain Security Scanner

Automated tier-one web application vulnerability discovery powered by the Probus adapter, with API fuzzing findings surfaced in Guard.

Probus Web Application Attack Surface

Knossos procedurally generates realistic decoy cloud environments so attackers waste time in fake infrastructure instead of yours.