What cloud providers does Mondoo integrate with?

Mondoo integrates with all major cloud providers including AWS, Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI), and VMware. These integrations enable comprehensive security scanning of cloud resources, configurations, and compliance posture.

Does Mondoo support Kubernetes security scanning?

Yes, Mondoo provides native Kubernetes integration through the Mondoo Operator. This enables continuous security assessment of Kubernetes clusters, workloads, and configurations. Mondoo also integrates with container registries like Docker Hub, AWS ECR, Azure ACR, and Google GCR.

Can Mondoo integrate with CI/CD pipelines?

Mondoo integrates with popular CI/CD platforms including GitHub Actions, GitLab CI/CD, Azure Pipelines, CircleCI, and Jenkins. These integrations enable security testing as part of your development workflow, catching vulnerabilities before deployment.

What vulnerability management tools does Mondoo integrate with?

Mondoo integrates with leading vulnerability management platforms including Qualys VMDR, Tenable.io, Rapid7 InsightVM, Tanium, AWS Inspector, and Microsoft Defender Vulnerability Management. These integrations allow you to correlate and prioritize findings across tools.

How many integrations does Mondoo support?

Mondoo supports over 100 integrations across multiple categories including cloud providers, container platforms, CI/CD pipelines, vulnerability management, EDR, application security, SIEM, GRC, operating systems, ticketing systems, and data export destinations.

What SIEM platforms does Mondoo integrate with?

Mondoo integrates with leading SIEM platforms including Microsoft Sentinel, Splunk, Elastic Security, Panther, and Exabeam. These integrations enable you to export security findings and correlate them with other security events in your centralized logging platform.

Does Mondoo integrate with ticketing systems like Jira?

Yes, Mondoo integrates with popular ticketing and workflow systems including Jira, Azure DevOps, Zendesk, ServiceNow ITSM, and PagerDuty. These integrations automatically create tickets for security findings and trigger alerts for critical vulnerabilities.

Can Mondoo integrate with EDR tools like CrowdStrike?

Yes, Mondoo integrates with EDR (Endpoint Detection and Response) platforms including CrowdStrike Falcon, SentinelOne, and Microsoft Defender for Endpoint. These integrations allow you to import EDR data and correlate it with vulnerability and compliance findings.

What compliance frameworks does Mondoo support through integrations?

Mondoo supports compliance automation for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, CIS Benchmarks, NIST, and DISA STIGs. Integrations with GRC platforms like OneTrust, Archer, and ServiceNow GRC enable centralized compliance reporting and audit management.

100+ integrations available

Connect to everything

Connect Mondoo to your entire infrastructure. From cloud providers to CI/CD pipelines, we integrate with the tools you already use.

Start for free View documentation

Popular integrations

AWS

Assess security and compliance of AWS organizations and accounts

Azure

Evaluate Azure subscriptions for security posture

Google Cloud

Monitor Google Cloud organizations and projects

Kubernetes

Use Mondoo Operator for cluster assessment

Terraform

Assess Terraform projects and state files

GitHub Actions

Continuous security testing in GitHub workflows

Qualys

Import vulnerability data from Qualys VMDR

CrowdStrike Falcon

Import EDR data and TI. Deliver Mondoo remediations

Snyk

Import Snyk vulnerability and dependency findings

131 integrations

AIX

Operating Systems

Assess IBM AIX systems security

Alibaba Cloud

Cloud

Assess Alibaba Cloud accounts and resources

AlmaLinux OS

Operating Systems

Evaluate AlmaLinux OS security

Alpine Linux

Operating Systems

Scan Alpine containers and systems

Amazon Linux

Operating Systems

Scan Amazon Linux instances

Amazon S3

Data Export

Export security data to S3 buckets

Ansible

Infrastructure as Code

Evaluate playbook security configurations

Arch Linux

Operating Systems

Assess Arch Linux systems

Archer

GRC

Export compliance data to RSA Archer

Arista

Network

Assess Arista network device security

Arnica

Application Security

Integrate Arnica developer security data

Atlassian

SaaS

Monitor Jira, Confluence, and SCIM

AWS

Cloud

Assess security and compliance of AWS organizations and accounts

AWS ECR

Containers

Integrate AWS Elastic Container Registry

AWS Inspector

Vulnerability Management

Import AWS Inspector vulnerability findings

Azure

Cloud

Evaluate Azure subscriptions for security posture

Azure ACR

Containers

Integrate Azure Container Registry

Azure Bicep

Infrastructure as Code

Test Azure Bicep files and ARM templates

Azure Blob Storage

Data Export

Export data to Azure storage

Azure DevOps

Ticket Systems

Create work items in Azure DevOps

Setup guide

Azure Pipelines

CI/CD

Continuous testing in Azure DevOps

BigQuery

Data Export

Export and analyze in BigQuery

Bottlerocket

Operating Systems

Scan AWS Bottlerocket container hosts

Check Point

Network

Assess Check Point firewall configurations

Checkmarx

Application Security

Import Checkmarx SAST/DAST results

CircleCI

CI/CD

Security scanning in CircleCI pipelines

Cisco

Network

Evaluate Cisco network device security

Cloudflare

SaaS

Assess Cloudflare accounts, zones, and DNS settings

CloudFormation

Infrastructure as Code

Test AWS CloudFormation templates

CrowdStrike Falcon

EDR

Import EDR data and TI. Deliver Mondoo remediations

Databricks

SaaS

Assess Databricks workspaces and account settings

Debian

Operating Systems

Assess Debian system security

DigitalOcean

Cloud

Assess DigitalOcean accounts and resources

Docker

Containers

Evaluate Docker container environments

Docker Hub

Containers

Integrate Docker Hub registries

Dropbox

SaaS

Assess Dropbox Business team security settings

Elastic

SIEM

Export data to Elastic SIEM

Exoscale

Cloud

Assess Exoscale organizations, zones, and resources

F5 BIG-IP

Network

Evaluate F5 BIG-IP device security

Fedora Linux

Operating Systems

Evaluate Fedora Linux workstations

Fortinet

Network

Evaluate FortiGate firewall security

FreeBSD

Operating Systems

Assess FreeBSD system security

GitHub

SaaS

Assess organizations and repositories

Setup guide

GitHub Actions

CI/CD

Continuous security testing in GitHub workflows

GitHub Advanced Security

Application Security

Import GHAS code scanning alerts

GitLab

SaaS

Assess groups and projects

Setup guide

GitLab CI/CD

CI/CD

Pipeline security testing integration

GitLab Security

Application Security

Integrate GitLab security scanning results

Google Cloud

Cloud

Monitor Google Cloud organizations and projects

Google GCR

Containers

Integrate Google Container Registry

Google Workspace

SaaS

Monitor Google Workspace environments

Helm

Infrastructure as Code

Test Helm charts before they reach your clusters

Hetzner Cloud

Cloud

Assess Hetzner Cloud projects and servers

Jamf

MDM

Evaluate Jamf-managed device security

Jenkins

CI/CD

Integrate security scans into Jenkins builds

Jira

Ticket Systems

Create issues for security findings

Setup guide

Juniper

Network

Assess Juniper network device security

Kubernetes

Containers

Use Mondoo Operator for cluster assessment

macOS

Operating Systems

Evaluate macOS security posture

Mend

Application Security

Integrate Mend (WhiteSource) SCA findings

Microsoft 365

SaaS

Assess M365 environments and configurations

MS Defender for Endpoint

EDR

Import Defender EDR findings

Microsoft Defender VM

Vulnerability Management

Integrate Defender vulnerability management

Microsoft Entra ID

SaaS

Assess Azure AD / Entra ID configurations

Microsoft Intune

MDM

Assess Intune-managed endpoints. Deliver Mondoo remediations

MikroTik

Network

Assess MikroTik RouterOS device security

MongoDB Atlas

SaaS

Assess MongoDB Atlas organizations, projects, and clusters

MS Defender for Cloud

Cloud Security

Integrate Azure Defender findings

Netlify

SaaS

Assess Netlify teams, sites, and deployments

NetScaler

Network

Evaluate NetScaler ADC and Gateway security

NextDNS

Network

Assess NextDNS profiles and security settings

Notion

SaaS

Assess Notion workspace security settings

Nutanix

Cloud

Assess Nutanix Prism Central clusters and VMs

Okta

SaaS

Evaluate Okta identity resources

OneTrust

GRC

Integrate with OneTrust GRC platform

OpenStack

Cloud

Assess OpenStack projects and resources

OpenTofu

Infrastructure as Code

Assess OpenTofu configurations, plans, and state files

Oracle Cloud

Cloud

Assess OCI tenancies and resources

Oracle Linux

Operating Systems

Evaluate Oracle Linux systems

Orca Security

Cloud Security

Import Orca cloud security findings

Packer

Infrastructure as Code

Analyze Packer builds and images

Palo Alto Networks

Network

Assess Palo Alto firewall configurations

Photon OS

Operating Systems

Assess VMware Photon OS security

Portainer

Containers

Assess Portainer environments and container stacks

PostgreSQL

Data Export

Export findings to PostgreSQL databases

Proxmox

Cloud

Evaluate Proxmox Virtual Environment security

Qualys

Vulnerability Management

Import vulnerability data from Qualys VMDR

Rapid7

Vulnerability Management

Import InsightVM vulnerability data

Red Hat Enterprise Linux

Operating Systems

Evaluate RHEL systems

Rocky Linux

Operating Systems

Assess Rocky Linux systems

SecurityScorecard

Third-Party Risk

Correlate with vendor risk ratings

Semgrep

Application Security

Integrate Semgrep SAST findings

SentinelOne Singularity

EDR

Integrate endpoint detection and response data

ServiceNow GRC

GRC

Integrate with ServiceNow compliance

ServiceNow ITSM

Ticket Systems

Create incidents and change requests

Setup guide

Shodan

Network

Integrate Shodan reconnaissance data

Slack

SaaS

Monitor Slack workspace security

Snowflake

SaaS

Assess Snowflake data warehouse security

Snowflake

Data Export

Export findings to Snowflake

Snyk

Application Security

Import Snyk vulnerability and dependency findings

Solaris

Operating Systems

Assess Oracle Solaris systems security

Splunk

SIEM

Export security data to Splunk

STACKIT

Cloud

Assess STACKIT cloud projects and resources

SUSE / openSUSE

Operating Systems

Assess SUSE and openSUSE systems

Tailscale

Network

Assess Tailscale tailnet devices, users, and access policies

Tanium

Vulnerability Management

Integrate Tanium vulnerability and asset data

Tenable

Vulnerability Management

Integrate Tenable.io and Nessus findings

Terraform

Infrastructure as Code

Assess Terraform projects and state files

Ubiquiti UniFi

Network

Evaluate Ubiquiti UniFi network device security

Ubuntu

Operating Systems

Scan Ubuntu servers and desktops

UpGuard

Third-Party Risk

Import UpGuard risk assessment data

Vercel

SaaS

Assess Vercel teams, projects, and deployments

VMware

Cloud

Evaluate vCenter Server, vSphere, ESXi systems

Windows

Operating Systems

Scan Windows servers and endpoints

Wiz

Cloud Security

Import Wiz cloud security findings

Zendesk

Ticket Systems

Generate support tickets for findings

Setup guide

Zoom

SaaS

Assess Zoom account security settings

Coming Soon

Up next: integrations we're building now to connect even more of your stack.

Aikido Security

Application Security

Import Aikido application security findings

Aqua Security

Containers

Container security and runtime protection

Armis

Asset Management

Import asset inventory from Armis

BitSight

Third-Party Risk

Integrate BitSight security ratings

Cribl

Threat Intelligence

Integrate threat intelligence feeds via Cribl

Exabeam

SIEM

Integrate with Exabeam security analytics

Iru

MDM

Assess Iru-managed Apple devices

JFrog Xray

Application Security

Import JFrog Xray SCA findings for your artifacts and images

Microsoft Sentinel

SIEM

Export findings to Azure Sentinel

MITRE ATT&CK

Threat Intelligence

Map findings to MITRE ATT&CK framework

PagerDuty

Ticket Systems

Trigger alerts for critical findings

Panther

SIEM

Export findings to Panther SIEM

ServiceNow CMDB

Asset Management

Sync with ServiceNow asset database

Zscaler

Network

Integrate Zscaler cloud security

Unified Security Across Your Entire Stack

Cloud Security Integrations

Mondoo integrates with AWS, Azure, Google Cloud, Oracle Cloud, and VMware to provide comprehensive security assessment of your cloud infrastructure. Use cnspec to scan IAM policies, network configurations, storage security, and compute resources to identify vulnerabilities and misconfigurations before they become breaches.

Container & Kubernetes Security

Deploy the Mondoo Operator in your Kubernetes clusters for continuous security monitoring. Integrate with Docker Hub, AWS ECR, Azure ACR, and Google GCR to scan container images for vulnerabilities. Query your infrastructure with cnquery to identify misconfigured workloads, exposed secrets, and compliance violations.

CI/CD Pipeline Security

Shift security left with native integrations for GitHub Actions, GitLab CI/CD, Azure Pipelines, CircleCI, and Jenkins. Run security scans as part of every build, block vulnerable deployments, and generate compliance reports automatically. Catch issues during development, not in production.

Vulnerability Management Consolidation

Import findings from Qualys, Tenable, Rapid7, Tanium, and other vulnerability scanners. Correlate data across tools to eliminate duplicate findings and prioritize remediation based on exploitability and business context. Agentic Managed Vulnerability Service acts as your central hub for unified, AI-powered security posture management.

Integration Categories

Cloud Providers

AWS, Azure, GCP, OCI

Containers

Kubernetes, Docker, ECR

CI/CD

GitHub, GitLab, Jenkins

IaC

Terraform, Ansible, Packer

Vulnerability

Qualys, Tenable, Rapid7

EDR

CrowdStrike, SentinelOne

AppSec

Snyk, Semgrep, Checkmarx

Ticketing

Jira, ServiceNow, Zendesk

Don't see your integration?

Mondoo's extensible provider system lets you build custom integrations. Contact us to learn more.

Request Integration View on GitHub

Coming Soon

Up next: integrations we're building now to connect even more of your stack.

Aikido Security

Application Security

Import Aikido application security findings

Aqua Security

Containers

Container security and runtime protection

Armis

Asset Management

Import asset inventory from Armis

BitSight

Third-Party Risk

Integrate BitSight security ratings

Cribl

Threat Intelligence

Integrate threat intelligence feeds via Cribl

Exabeam

SIEM

Integrate with Exabeam security analytics

Iru

MDM

Assess Iru-managed Apple devices

JFrog Xray

Application Security

Import JFrog Xray SCA findings for your artifacts and images

Microsoft Sentinel

SIEM

Export findings to Azure Sentinel

MITRE ATT&CK

Threat Intelligence

Map findings to MITRE ATT&CK framework

PagerDuty

Ticket Systems

Trigger alerts for critical findings

Panther

SIEM

Export findings to Panther SIEM

ServiceNow CMDB

Asset Management

Sync with ServiceNow asset database

Zscaler

Network

Integrate Zscaler cloud security

Unified Security Across Your Entire Stack

Cloud Security Integrations

Container & Kubernetes Security

CI/CD Pipeline Security

Vulnerability Management Consolidation

Integration Categories

Cloud Providers

AWS, Azure, GCP, OCI

Containers

Kubernetes, Docker, ECR

CI/CD

GitHub, GitLab, Jenkins

IaC

Terraform, Ansible, Packer

Vulnerability

Qualys, Tenable, Rapid7

EDR

CrowdStrike, SentinelOne

AppSec

Snyk, Semgrep, Checkmarx

Ticketing

Jira, ServiceNow, Zendesk