Security tools DigitalXForce connects to through X-Connect
Automated GRC platforms integrate with the existing security stack by reading control evidence from the tools a team already runs, so nobody exports screenshots for the auditor. X-Connect is the family of integration adapters that connect the DigitalXForce platform to security tools such as identity, endpoint, SIEM and cloud security. This page lists, as text, the 82 security tools shown on the DigitalXForce integrations page, grouped by category, with one sentence on the evidence each category supplies.
That evidence feeds Continuous Control Assurance, which uses evidence, monitoring and validation to determine whether controls continue to operate as expected. The 250+ technology integrations are counted by product connector, so one tool named here can stand for several of that vendor’s products, each with its own connector.
Identity and access management and PAM
DigitalXForce reads accounts, roles, multi-factor authentication settings, privileged access and access reviews from these tools, and tests the identity controls against them. The tools in this category are Delinea, Microsoft Entra ID (formerly Azure Active Directory), SailPoint, CyberArk, Okta, Saviynt, Kandji and Securden.
Cloud and infrastructure security management
DigitalXForce reads endpoint protection status, device compliance, and firewall and secure access settings from these tools, and tests the infrastructure controls against them. The tools in this category are Microsoft Defender, Cisco Umbrella, Zscaler, Microsoft Intune, Bitdefender, Cloudflare WAF, CrowdStrike, Malwarebytes, ManageEngine Applications Manager, Microsoft Defender for Cloud, Microsoft Defender for Endpoint and Trend Micro.
Security monitoring and response
DigitalXForce reads alerts, log coverage, detection status and incident records from these tools as evidence that the monitoring and response controls are working. The tools in this category are IBM QRadar, Splunk, Wazuh, CrowdStrike FIM, CloudConnexa, Huntress, Logz.io, ManageEngine EventLog Analyzer, Snort, SOCRadar, Trend Micro XDR, Vicarius, Vulert, WatchGuard, Sophos Endpoint, Check Point EDR, VirusTotal, Sumo Logic, Fortinet FortiMonitor, Microsoft Sentinel, Mimecast, Rapid7, ManageEngine Log360, Fortinet FortiSOAR, Trend Micro Apex One, ManageEngine OpManager, ManageEngine Site24x7, Autopsy Digital Forensics, AlienVault and Sophos XDR.
Threat and vulnerability management
DigitalXForce reads vulnerability findings, scan coverage, code scan results and patch status from these tools, and ties each finding to the control it affects. The tools in this category are Rapid7 InsightVM, Snyk, StackHawk, Nessus, Burp Suite, Qualys, SonarQube, Acunetix by Invicti, IBM Security AppScan, APIVoid, AppSweep, 3E, Detectify, ManageEngine Patch Manager, IPQualityScore, Kiuwan, Klocwork, MalwareBazaar, Metasploit, MobSF, Netwrix Change Tracker, Qwiet AI, Semgrep, KnowBe4, Intruder, Tenable, Nmap, Rapid7 Nexpose and ManageEngine Vulnerability Manager Plus.
Governance, risk and compliance and IRM
DigitalXForce reads risk ratings and assessment results from this tool, and brings them into the same risk record as the platform’s own findings. The tool in this category is RiskXchange.
OT and IoT
DigitalXForce reads operational technology and IoT asset inventories and alerts from these tools, so plant and device risk sits in the same view as IT risk. The tools in this category are Claroty and Nozomi Networks.
You can read more about Enterprise Security Risk and Posture Management (ESRPM).
Ask for a tool that is not listed
The list keeps growing as new connectors are built. Request a demo and name the tool you use. The enterprise systems are listed on the enterprise systems page, and every category with its logos is on the integrations page.
