Integrations
What Rune Gurd works with.
Send findings to the tools your team already uses, and see which agents Guard covers.
Nothing matches that. Ask us about it.
SIEM and export
Splunk
Send findings and incident changes to the HTTP Event Collector.
Read the docs →LiveElasticsearch and OpenSearch
Send events through the bulk API.
Read the docs →LiveDatadog
Send events to Datadog Logs.
Read the docs →LiveAPIMicrosoft Sentinel
Send findings through a data collection rule.
Read the docs →LiveAWS Security Hub
Send findings to your account and region.
Read the docs →LiveAmazon S3
Write events to a bucket and prefix you choose.
Read the docs →LiveSyslog
Send events to a syslog receiver.
Read the docs →LiveOpenTelemetry
Send events as OTLP logs.
Read the docs →LiveWebhooks
Send signed OCSF events to any HTTPS endpoint.
Read the docs →Ticketing and alerting
Jira
File a ticket from a response rule and keep it in step with the incident.
Read the docs →LiveAPIServiceNow
File a ticket from a response rule and keep it in step with the incident.
Read the docs →LiveAPIPagerDuty
Raise an alert from a response rule and keep it in step with the incident.
Read the docs →LiveAPINotify people from a response rule.
Read the docs →Chat
Identity
Okta
Read users and groups to give agents an owner.
Read the docs →LiveAPIMicrosoft Entra ID
Read users and groups to give agents an owner.
Read the docs →LiveSAML
Sign in to the Console through your identity provider.
Read the docs →LiveOpenID Connect
Sign in to the Console through your identity provider.
Read the docs →LiveSCIM
Provision Console users and map groups to roles.
Read the docs →MDM
AI harnesses
Claude Code
Inventory, sensor findings and hooks on the endpoint.
Read the docs →LiveCodex
Inventory, sensor findings and hooks on the endpoint.
Read the docs →LiveCursor
Inventory, sensor findings and hooks on the endpoint.
Read the docs →LiveGitHub Copilot CLI
Inventory, sensor findings and hooks on the endpoint.
Read the docs →LiveGemini CLI
Inventory, sensor findings and hooks on the endpoint.
Read the docs →LiveWindsurf
Inventory, sensor findings and hooks on the endpoint.
Read the docs →LiveCline
Inventory, sensor findings and hooks on the endpoint.
Read the docs →Don’t see yours?
Tell us what you use and what you’d want Guard to send it. We read every request.