Integrations Overview - Tierity Docs

Available integrations

Source code

GitHub

View pull requests, commits, file diffs, reviews, and inline comments. Approve PRs and post comments without leaving Tierity.

GitLab

Review merge requests, diffs, and approval status from GitLab without leaving Tierity.

SAST / SCA / Code security

Semgrep

Pull SAST findings, secrets detection results, and supply chain issues from Semgrep.

Checkmarx One

Import SAST findings from Checkmarx One.

Snyk

Import open source, container, IaC, and code vulnerability findings from Snyk.

Aikido Security

Continuous scanning for code vulnerabilities, secrets, dependencies, and cloud misconfigurations.

Arnica

Code security posture management: hardcoded secrets, risky code changes, and supply chain threats.

Corgea

AI-assisted SAST findings with auto-fix suggestions for accelerated remediation.

Endor Labs

Import dependency findings with reachability analysis to prioritize supply chain risk.

GitGuardian

Secret incidents: hardcoded credentials found in code, git history and CI.

DryRun Security

Contextual security findings on your pull requests.

OX Security

Application security issues and posture from OX ASPM.

API security

Escape

Import API security scan results from Escape to track vulnerabilities in your REST, GraphQL, and gRPC APIs.

OpenAPI viewer

Browse OpenAPI and Swagger specs from a URL, a file or a GitHub repository.

Cloud security

AWS

Discover resources, identify security misconfigurations, and import infrastructure for analysis.

Wiz

Pull cloud security posture findings and vulnerability data from your Wiz environment.

Google Cloud

Cloud Asset Inventory resources and Security Command Center findings.

Azure

Resource Graph resources and Microsoft Defender for Cloud alerts.

Endpoint security (EDR)

CrowdStrike Falcon

View endpoint detections, incidents, and agent health from CrowdStrike Falcon.

SentinelOne

Surface active threats, agent health, and STAR alerts from SentinelOne.

Identity

Okta

MFA strength, admins, leavers still active, devices, apps and failed sign-ins.

Microsoft Entra ID

MFA methods, directory roles, Intune compliance and risky users via Microsoft Graph.

authentik

MFA, superusers, application access and failed logins, including self-hosted instances.

See Identity providers for the checks Tierity runs on every identity provider.

Bug bounty

HackerOne

Manage bug bounty and VDP reports from your HackerOne program.

Issue tracking

Jira

Push findings and tasks to Jira issues and link security work to your engineering backlog.

Linear

Create Linear issues from findings and view your team’s issue backlog in Tierity.

Knowledge base

Connect a wiki or docs tool as context for Workflows — browse pages and tag the ones AI skills should pull as reference material.

Notion

Browse and tag Notion pages as context for AI skills.

Confluence

Browse and tag Confluence pages as context for AI skills.

Coda

Browse and tag Coda pages as context for AI skills.

Incident management

incident.io

Track active incidents, view severity breakdowns, and link security findings to incident response.

PagerDuty

View active incidents, on-call schedules, and service health from PagerDuty.

Email security

dmarcian

View DMARC report data and email authentication coverage across your domains.

KnowBe4

Track phishing simulation click rates and security awareness training completion.

Network security

Fastly

Monitor WAF rule violations and traffic security data from your Fastly services.

Supply chain

Socket.dev

Monitor supply chain alerts for malicious and risky open source packages.

Compliance

Vanta

Pull compliance controls, security tests, evidence requests, and vendor management data from Vanta.

Drata

Framework readiness, failing tests, personnel and device compliance, policies and vendor reviews.

Security data pipeline

Monad

Monitor security data pipeline health — running, failed, and healthy pipeline counts.

Secrets management

1Password

Reference secrets stored in 1Password when configuring integrations in Tierity.

Bitwarden Secrets Manager

Store integration credentials in Bitwarden and reference them in Tierity with .

Notifications

Slack

Receive notifications about security events and findings directly in your Slack channels.

Connecting an integration

Integrations are managed under Config → Integrations, where you can browse, connect and configure the tools your organization uses.

Open Config → Integrations

Go to Config → Integrations.

Find an integration

Browse the list or search by name. Each card shows the integration name, category, and whether it’s currently enabled.

Enable and configure

Click an integration to view setup instructions, then click Enable or Configure to complete setup.

Enabled integrations can be toggled off at any time. Disabling an integration stops data sync but does not delete previously imported data.

External sources

Some integrations appear as external sources in the sidebar — fully-featured views embedded directly into Tierity. GitHub and GitLab are external sources, giving you a native PR/MR review experience without leaving the platform.

Two-tier authentication model

Tierity uses two levels of credentials for integrations:

Org-level connections

Configured by someone with the Manage role or higher in Config → Integrations. Org connections power data sync, read views, and platform-initiated actions (creating issues, sending notifications). These use a service account or shared API key owned by the organization.

Personal connections

Configured per user in Profile → Connections. Personal connections let Tierity act on your behalf — adding comments, transitioning issues, approving pull requests — so actions appear under your own identity in the external tool. Integrations that support write actions (GitHub, GitLab, Bitbucket, Linear, Jira) benefit from a personal connection. If you don’t configure one, write actions fall back to the org-level credential.

Integration permissions

Connecting and configuring org-level integrations requires the Manage role or higher. Personal connections can be configured by any team member from their Profile page.

Category	Integrations
Source code	GitHub, GitLab
SAST / SCA / Code security	Semgrep, Checkmarx One, Snyk, Aikido, Arnica, Corgea, Endor Labs, GitGuardian, DryRun Security, OX Security
API security	Escape, OpenAPI viewer
Cloud security	AWS, Google Cloud, Azure, Wiz
Endpoint security (EDR)	CrowdStrike Falcon, SentinelOne
Identity	Okta, Microsoft Entra ID, authentik
Bug bounty	HackerOne
Issue tracking	Jira, Linear
Incident management	incident.io, PagerDuty
Email security	dmarcian, KnowBe4
Network security	Fastly
Supply chain	Socket.dev
Compliance	Vanta, Drata
Security data pipeline	Monad
Secrets management	1Password, Bitwarden Secrets Manager
Notifications	Slack

Webhook security

Integrations that communicate via inbound webhooks (such as GitHub) validate payload signatures. Never expose webhook endpoints without signature validation, and treat webhook secrets like any other credential.

​Available integrations

​Source code