> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tierity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Integrations Overview

> Tierity connects with the security and development tools your team already uses. Enable integrations through the marketplace to pull findings, automate notifications, and view external data without leaving the platform.

## Available integrations

### Source code

> **[GitHub](https://docs.tierity.com/integrations/github.md)**
>
> ![GitHub](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/github_dark.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=3d0f57cd9b11afe54811c4fc98972440)
>
> View pull requests, commits, file diffs, reviews, and inline comments. Approve PRs and post comments without leaving Tierity.

> **[GitLab](https://docs.tierity.com/integrations/gitlab.md)**
>
> ![GitLab](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/gitlab.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=fdaafe15a2c3c9f9d34d5b1c6a4f436a)
>
> Review merge requests, diffs, and approval status from GitLab without leaving Tierity.

### SAST / SCA / Code security

> **[Semgrep](https://docs.tierity.com/integrations/semgrep.md)**
>
> ![Semgrep](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/semgrep.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=572615a3c89d021c497ca21a2ea11b0f)
>
> Pull SAST findings, secrets detection results, and supply chain issues from Semgrep.

> **[Checkmarx One](https://docs.tierity.com/integrations/checkmarx.md)**
>
> ![Checkmarx](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/checkmarx-one.png?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=269bd1d287b354cff1652bff510efefb)
>
> Import SAST findings from Checkmarx One.

> **[Snyk](https://docs.tierity.com/integrations/snyk.md)**
>
> ![Snyk](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/snyk.png?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=ada895a103a6d690c2c73cacfaa61f16)
>
> Import open source, container, IaC, and code vulnerability findings from Snyk.

> **[Aikido Security](https://docs.tierity.com/integrations/aikido.md)**
>
> ![Aikido](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/aikido.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=f0522073d5e1566172c17a9bbf3129b2)
>
> Continuous scanning for code vulnerabilities, secrets, dependencies, and cloud misconfigurations.

> **[Arnica](https://docs.tierity.com/integrations/arnica.md)**
>
> ![Arnica](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/arnica_dark.png?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=12cec0e37c0747aea5501a1984e04713)
>
> Code security posture management: hardcoded secrets, risky code changes, and supply chain threats.

> **[Corgea](https://docs.tierity.com/integrations/corgea.md)**
>
> ![Corgea](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/corgea.png?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=a03b076891a29fdfdb8fa231a9d6fa95)
>
> AI-assisted SAST findings with auto-fix suggestions for accelerated remediation.

> **[Endor Labs](https://docs.tierity.com/integrations/endorlabs.md)**
>
> Import dependency findings with reachability analysis to prioritize supply chain risk.

> **[GitGuardian](https://docs.tierity.com/integrations/gitguardian.md)**
>
> ![GitGuardian](https://mintcdn.com/tierity/qDgNTQeMcwl4pLPA/logos/gitguardian_light.svg?fit=max\&auto=format\&n=qDgNTQeMcwl4pLPA\&q=85\&s=16dfe18bca370fa9433e33e6263e7bd9)
>
> Secret incidents: hardcoded credentials found in code, git history and CI.

> **[DryRun Security](https://docs.tierity.com/integrations/dryrunsecurity.md)**
>
> ![DryRun Security](https://mintcdn.com/tierity/qDgNTQeMcwl4pLPA/logos/dryrun-security.svg?fit=max\&auto=format\&n=qDgNTQeMcwl4pLPA\&q=85\&s=fcf4be6eb2fdc9e7c2e0a065883d7d39)
>
> Contextual security findings on your pull requests.

> **[OX Security](https://docs.tierity.com/integrations/oxsecurity.md)**
>
> ![OX Security](https://mintcdn.com/tierity/qDgNTQeMcwl4pLPA/logos/ox-security.svg?fit=max\&auto=format\&n=qDgNTQeMcwl4pLPA\&q=85\&s=7238ed55c96cce9310000194516af64c)
>
> Application security issues and posture from OX ASPM.

### API security

> **[Escape](https://docs.tierity.com/integrations/escape.md)**
>
> Import API security scan results from Escape to track vulnerabilities in your REST, GraphQL, and gRPC APIs.

> **[OpenAPI viewer](https://docs.tierity.com/integrations/openapi.md)**
>
> Browse OpenAPI and Swagger specs from a URL, a file or a GitHub repository.

### Cloud security

> **[AWS](https://docs.tierity.com/integrations/aws.md)**
>
> ![AWS](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/aws.png?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=f3d11fe418bf50504ac1c628e01b7b5b)
>
> Discover resources, identify security misconfigurations, and import infrastructure for analysis.

> **[Wiz](https://docs.tierity.com/integrations/wiz.md)**
>
> ![Wiz](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/wiz.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=1d48967dbdf68be28f1b15d3cf24acb9)
>
> Pull cloud security posture findings and vulnerability data from your Wiz environment.

> **[Google Cloud](https://docs.tierity.com/integrations/gcp.md)**
>
> Cloud Asset Inventory resources and Security Command Center findings.

> **[Azure](https://docs.tierity.com/integrations/azure.md)**
>
> Resource Graph resources and Microsoft Defender for Cloud alerts.

### Endpoint security (EDR)

> **[CrowdStrike Falcon](https://docs.tierity.com/integrations/crowdstrike.md)**
>
> ![CrowdStrike](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/crowdstrike_falcon.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=32ae7869ccc7574d08e4c41d8a629da1)
>
> View endpoint detections, incidents, and agent health from CrowdStrike Falcon.

> **[SentinelOne](https://docs.tierity.com/integrations/sentinelone.md)**
>
> ![SentinelOne](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/sentinelone.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=b3b355724aba50e27a461c4fcb23f210)
>
> Surface active threats, agent health, and STAR alerts from SentinelOne.

### Identity

> **[Okta](https://docs.tierity.com/integrations/okta.md)**
>
> ![Okta](https://mintcdn.com/tierity/qDgNTQeMcwl4pLPA/logos/okta.svg?fit=max\&auto=format\&n=qDgNTQeMcwl4pLPA\&q=85\&s=7a1f27612c92cd92c708476d03b1f78e)
>
> MFA strength, admins, leavers still active, devices, apps and failed sign-ins.

> **[Microsoft Entra ID](https://docs.tierity.com/integrations/entra.md)**
>
> ![Microsoft Entra ID](https://mintcdn.com/tierity/qDgNTQeMcwl4pLPA/logos/microsoft-entra-id.svg?fit=max\&auto=format\&n=qDgNTQeMcwl4pLPA\&q=85\&s=002544f0b69c2ad9b7c4170e954c9082)
>
> MFA methods, directory roles, Intune compliance and risky users via Microsoft Graph.

> **[authentik](https://docs.tierity.com/integrations/authentik.md)**
>
> ![authentik](https://mintcdn.com/tierity/qDgNTQeMcwl4pLPA/logos/authentik.svg?fit=max\&auto=format\&n=qDgNTQeMcwl4pLPA\&q=85\&s=3160740aacc69cb55708fcacb6d7f860)
>
> MFA, superusers, application access and failed logins, including self-hosted instances.

See [Identity providers](https://docs.tierity.com/integrations/identity.md) for the checks Tierity runs on every identity provider.

### Bug bounty

> **[HackerOne](https://docs.tierity.com/integrations/hackerone.md)**
>
> ![HackerOne](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/hackerone_dark.png?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=842eaa009e81ee4d36d643b76c8e1255)
>
> Manage bug bounty and VDP reports from your HackerOne program.

### Issue tracking

> **[Jira](https://docs.tierity.com/integrations/jira.md)**
>
> ![Jira](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/jira.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=6cd5c40521f06fa1523ebd24048a9999)
>
> Push findings and tasks to Jira issues and link security work to your engineering backlog.

> **[Linear](https://docs.tierity.com/integrations/linear.md)**
>
> ![Linear](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/linear.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=e440961e0aa19fdcd7ee42cc57fc5841)
>
> Create Linear issues from findings and view your team's issue backlog in Tierity.

### Knowledge base

Connect a wiki or docs tool as context for [Workflows](https://docs.tierity.com/features/workflows.md) — browse pages and tag the ones AI skills should pull as reference material.

> **[Notion](https://docs.tierity.com/integrations/notion.md)**
>
> Browse and tag Notion pages as context for AI skills.

> **[Confluence](https://docs.tierity.com/integrations/confluence.md)**
>
> Browse and tag Confluence pages as context for AI skills.

> **[Coda](https://docs.tierity.com/integrations/coda.md)**
>
> Browse and tag Coda pages as context for AI skills.

### Incident management

> **[incident.io](https://docs.tierity.com/integrations/incidentio.md)**
>
> Track active incidents, view severity breakdowns, and link security findings to incident response.

> **[PagerDuty](https://docs.tierity.com/integrations/pagerduty.md)**
>
> ![PagerDuty](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/pagerduty.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=cff9b337241dc9352f96b7cc351d51f2)
>
> View active incidents, on-call schedules, and service health from PagerDuty.

### Email security

> **[dmarcian](https://docs.tierity.com/integrations/dmarcian.md)**
>
> View DMARC report data and email authentication coverage across your domains.

> **[KnowBe4](https://docs.tierity.com/integrations/knowbe4.md)**
>
> ![KnowBe4](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/knowbe4.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=3f9809755a0b0a5eda18c039346a9219)
>
> Track phishing simulation click rates and security awareness training completion.

### Network security

> **[Fastly](https://docs.tierity.com/integrations/fastly.md)**
>
> Monitor WAF rule violations and traffic security data from your Fastly services.

### Supply chain

> **[Socket.dev](https://docs.tierity.com/integrations/socket.md)**
>
> ![Socket.dev](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/socket.png?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=aed6ab5b75843b09565b47f03b3ee1c8)
>
> Monitor supply chain alerts for malicious and risky open source packages.

### Compliance

> **[Vanta](https://docs.tierity.com/integrations/vanta.md)**
>
> ![Vanta](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/vanta.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=6e0d08131fe184232ec7e848bbbe1625)
>
> Pull compliance controls, security tests, evidence requests, and vendor management data from Vanta.

> **[Drata](https://docs.tierity.com/integrations/drata.md)**
>
> Framework readiness, failing tests, personnel and device compliance, policies and vendor reviews.

### Security data pipeline

> **[Monad](https://docs.tierity.com/integrations/monad.md)**
>
> Monitor security data pipeline health — running, failed, and healthy pipeline counts.

### Secrets management

> **[1Password](https://docs.tierity.com/integrations/1password.md)**
>
> ![1Password](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/1password.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=6817553d5d773d9155b870acb9610dc1)
>
> Reference secrets stored in 1Password when configuring integrations in Tierity.

> **[Bitwarden Secrets Manager](https://docs.tierity.com/integrations/bitwarden.md)**
>
> ![Bitwarden](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/bitwarden.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=309b7a95fdaa11fe6e716bc71c0858df)
>
> Store integration credentials in Bitwarden and reference them in Tierity with `{{bw.secret_name}}`.

### Notifications

> **[Slack](https://docs.tierity.com/integrations/slack.md)**
>
> ![Slack](https://mintcdn.com/tierity/DiEJvY7dKIf2GoUq/logos/slack.svg?fit=max\&auto=format\&n=DiEJvY7dKIf2GoUq\&q=85\&s=d375f632ad82fd89cf21bdf349219410)
>
> Receive notifications about security events and findings directly in your Slack channels.

***

## Connecting an integration

Integrations are managed under **Config → Integrations**, where you can browse, connect and configure the tools your organization uses.

**1. Open Config → Integrations**

Go to **Config → Integrations**.

**2. Find an integration**

Browse the list or search by name. Each card shows the integration name, category, and whether it's currently enabled.

**3. Enable and configure**

Click an integration to view setup instructions, then click **Enable** or **Configure** to complete setup.

Enabled integrations can be toggled off at any time. Disabling an integration stops data sync but does not delete previously imported data.

## External sources

Some integrations appear as **external sources** in the sidebar — fully-featured views embedded directly into Tierity. GitHub and GitLab are external sources, giving you a native PR/MR review experience without leaving the platform.

## Two-tier authentication model

Tierity uses two levels of credentials for integrations:

### Org-level connections

Configured by someone with the Manage role or higher in **Config → Integrations**. Org connections power data sync, read views, and platform-initiated actions (creating issues, sending notifications). These use a service account or shared API key owned by the organization.

### Personal connections

Configured per user in **[Profile → Connections](https://docs.tierity.com/profile/connections.md)**. Personal connections let Tierity act on your behalf — adding comments, transitioning issues, approving pull requests — so actions appear under your own identity in the external tool.

Integrations that support write actions (GitHub, GitLab, Bitbucket, Linear, Jira) benefit from a personal connection. If you don't configure one, write actions fall back to the org-level credential.

## Integration permissions

Connecting and configuring org-level integrations requires the **Manage** role or higher. Personal connections can be configured by any team member from their Profile page.

## Categories

| Category | Integrations |
| - | - |
| **Source code** | GitHub, GitLab |
| **SAST / SCA / Code security** | Semgrep, Checkmarx One, Snyk, Aikido, Arnica, Corgea, Endor Labs, GitGuardian, DryRun Security, OX Security |
| **API security** | Escape, OpenAPI viewer |
| **Cloud security** | AWS, Google Cloud, Azure, Wiz |
| **Endpoint security (EDR)** | CrowdStrike Falcon, SentinelOne |
| **Identity** | Okta, Microsoft Entra ID, authentik |
| **Bug bounty** | HackerOne |
| **Issue tracking** | Jira, Linear |
| **Incident management** | incident.io, PagerDuty |
| **Email security** | dmarcian, KnowBe4 |
| **Network security** | Fastly |
| **Supply chain** | Socket.dev |
| **Compliance** | Vanta, Drata |
| **Security data pipeline** | Monad |
| **Secrets management** | 1Password, Bitwarden Secrets Manager |
| **Notifications** | Slack |

## Webhook security

Integrations that communicate via inbound webhooks (such as GitHub) validate payload signatures. Never expose webhook endpoints without signature validation, and treat webhook secrets like any other credential.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.