Integrations
Cybsis plugs into the tools you already run.
Connector architecture — every integration is a separate module on the server, configured per-instance, credentials stored encrypted, every sync written to the audit trail. 1 connector is bundled with the platform; 3 ship as paid modules; the roadmap below is what's queued up next.
Architecture
What every connector ships with.
Three properties hold for every integration on this page — the ones available today, the ones on the roadmap, and the contract-specific ones we onboard for individual customers. They're the reason you can buy a connector and trust it the same week.
One isolated module each
Every connector is an independent module on the API side, implementing a standard interface (sync / push / webhook). Adding a connector never touches core code, and a broken integration can't take the rest of the platform with it.
Per-instance encrypted credentials
Connector configuration is scoped per Cybsis instance, never global. Client secrets, tokens, and LDAP bind passwords are stored encrypted with AES-256-GCM and surfaced only at sync time.
Every event in the audit trail
Every sync run, push to an external system, and inbound webhook lands in the audit log with timestamps, payload size, and outcome — so an auditor or an oncall engineer can answer 'what touched what' from a single query.
Available today · 4
The connectors shipping right now.
Email delivery comes bundled with the platform — every install needs an outbound channel. Identity (AD, Microsoft 365) and ticketing (JIRA) are sold as paid modules: substantial engineering, priced individually, billed alongside the rest of your bundle.
LDAP / Microsoft Active Directory
+€100/yrIdentity & directory · Paid module
User authentication via LDAP bind against AD or any LDAP directory — TLS, group-restricted access, nested groups resolved.
Learn more →Microsoft 365 (SharePoint / OneDrive)
+€100/yrIdentity & directory · Paid module
Link documents and evidence straight from SharePoint and OneDrive via Microsoft Graph — live metadata, broken-link detection, encrypted credentials.
Learn more →JIRA
+€700/yrTicketing · Paid module
Bidirectional sync — create JIRA issues from Cybsis incidents, risks, and corrective actions; link existing tickets back to Cybsis records.
Learn more →Email — SMTP / Resend
BundledEmail delivery · No extra charge
Outbound email for notifications and digests. Use any SMTP server, or wire up Resend's API for managed delivery.
Learn more →
Paid integrations also appear in the bundle configurator so you can price them alongside other modules.
Roadmap · 8 categories
What's queued up next.
Each connector ships as its own paid module, typically €500–€1,000/year depending on the scope of the integration. We prioritise the roadmap against actual customer demand, and connector work usually lands 2–4 weeks after it's prioritised. If something on your stack isn't listed below, mention it in the quote request — we'll fold it into the roadmap.
- SIEM
- Splunk, Microsoft Sentinel, Elastic SIEM
- Vulnerability management
- Nessus, OpenVAS, Qualys
- Threat intelligence
- MISP, OpenCTI, TAXII / STIX feeds
- Endpoint security
- CrowdStrike, SentinelOne
- Cloud security
- AWS Security Hub, Azure Defender, GCP Security Command Center
- Monitoring
- Zabbix, Nagios, PRTG, Grafana
- Ticketing
- ServiceNow, Freshservice
- Identity & directory
- Microsoft Entra ID (Azure AD), Okta
Before you configure
Two things worth knowing.
Why some connectors are bundled and others are paid
Email delivery is platform plumbing rather than a feature — the notification system, password resets, licence-expiry warnings, and backup alerts all depend on it. We bundle it so every installation has a working outbound channel from day one.
Identity and ticketing connectors are substantial engineering (LDAP/Entra sync, group-to-role mapping, bidirectional ticket sync with comment round-trip) that map to enterprise tooling buyers expect to pay for elsewhere. They're sold as paid modules in the €100–€700/year band.
How paid connectors are priced
Each paid connector is its own module — billable individually, so you pay only for the connectors your stack actually needs. Directory connectors (AD, Microsoft 365) are €100/year each — token-contribution pricing for the directory link. Ticketing and workflow connectors are €700/year. Roadmap connectors arrive at the same €500–€1,000/year band as their scope dictates.
The Complete combo folds every paid connector into a single SKU; à-la-carte buyers see each line item on the invoice.
Need a connector that isn't listed?
Internal tools, niche vendor APIs, or a SIEM/EDR product not on the roadmap above — mention it in the quote request. Connector work for a defined scope usually lands within 2–4 weeks of being prioritised, and ships into the catalogue as a paid module in the €500–€1,000/year band like the others.
Request a quote →Connect Cybsis to the stack you already pay for.
Identity, ticketing, mail, and the connectors that come after them — priced individually, audited end-to-end, and live in the same week they're prioritised.