Connect Cyber Horizon to your stack.
Pull evidence and signals from the tools you already use — cloud, identity, endpoint, vulnerability, code, HR and security-awareness — and extend the platform with a REST API and webhooks.
// How it works
From connected to automated.
Connect
Authorise in a few clicks with OAuth or secure keys. SSO (SAML/OIDC) is available on Enterprise for org-wide access.
Sync & check
Cyber Horizon pulls evidence and security signals — cloud, identity, endpoints, vulnerabilities, code and HR — and runs automated checks against your live environment.
Automate
Failing checks surface as findings you can route into Jira and Slack, fire webhooks on, or build your own flows around via the REST API.
// Catalogue
Available integrations
23 live · 7 categories
Each integration runs dozens of automated security checks against your live environment, surfacing failing controls as findings.
Cloud
3Continuously pull configuration and posture evidence from your cloud accounts.
- AWSAmazon Web ServicesIAM, S3, CloudTrail, GuardDuty, EC2, RDS, Lambda, EKS, KMS — 30+ checks
- AZMicrosoft AzureNSGs, VMs, SQL, AKS, Storage, Defender for Cloud — 60+ checks
- GCPGoogle Cloud PlatformIAM, Compute, Cloud SQL, GKE, Storage, firewall, audit logging
Identity & Access
4Verify MFA coverage, privileged access and user lifecycle across your IdPs.
- OKTAOktaMFA, password policy, user lifecycle, ThreatInsight — 14 checks
- EIDMicrosoft Entra IDMFA coverage, Conditional Access, privileged roles, at-risk users
- GWSGoogle Workspace2-Step Verification, super-admin count, admin audit logging
- 365Microsoft 365 Secure ScoreSecure Score, peer comparison, recommended-control coverage
Endpoint & Device
5Track agent coverage, encryption and device compliance across your fleet.
- CSCrowdStrike FalconSensor coverage, prevention policies, detections, Spotlight vulns
- S1SentinelOneAgent coverage, infected endpoints, agent currency, open threats
- MDEMicrosoft Defender for EndpointOnboarding, AV status, alerts, secure score, vuln exposure
- JAMFJamf PromacOS/iOS compliance, FileVault, OS patch currency
- INTMicrosoft IntuneDevice compliance, BitLocker/FileVault, app protection
Vulnerability Management
3Pull scan coverage, critical CVEs and SLA tracking from your scanners.
- TENTenable.ioScan coverage, critical CVEs, SLA tracking, scanner health
- QLYQualys VMAsset inventory coverage, scan recency, VM programme hygiene
- SNYKSnykSCA / SAST / IaC — monitored projects, critical & high vulns
Code & Ticketing
3Tie controls to code and route remediation into the trackers your team lives in.
- GHGitHubBranch protection, secret scanning, Dependabot, code scanning, 2FA
- GLGitLabCI/CD security, SAST, group 2FA, vuln findings, audit logging
- JIRAJiraSecurity project hygiene, open vuln tickets, SLA compliance
People & Awareness
3Watch joiner/leaver events and training so access and people data stay clean.
- BHRBambooHREmployee lifecycle, offboarding, access-review triggers
- BOBHiBobOnboarding, department/role data for RBAC, identity completeness
- KB4KnowBe4Awareness training, phishing sims, phish-prone %, risk scores
Network & Messaging
2Check edge security posture and collaboration-tool hardening.
- CFCloudflareTLS mode, minimum TLS version, Always-HTTPS, DNSSEC across zones
- SLSlackMember 2FA, owner/admin minimisation, guest/external review
New connectors ship regularly. Need a specific tool? Tell us.
// For developers
Build your own.
A REST API and webhooks to automate against the platform and build your own flows.
REST API
Programmatic access to risks, vendors, cases and more. Generate scoped API keys from your settings and automate against the platform.
# List open risks
curl https://api.cyberhorizon.co/v1/risks \
-H "Authorization: Bearer $CHI_API_KEY"Webhooks
Subscribe to events and push updates into your own systems, so Cyber Horizon fits the workflows you already run.
// POST to your endpoint
{
"event": "risk.created",
"data": { "id": "rsk_8f2c", "severity": "high" }
}See it connected to your tools.
Book a demo and we’ll show how Cyber Horizon fits your existing stack — and runs checks against it from day one.