Stay connected with your ecosystem

Automate detection and response for the threats detected by your Perch-integrated tools. Store, search, and visualize log activity from within Perch for a holistic picture of your environment. The Perch platform includes these cloud-based, next-gen SIEM integrations, and we're always adding more.

  • Auth0

    Incorporate Auth0 into Perch's managed threat detection and reporting.

    Learn more
  • AWS Cloudtrail

    Ingest critical events from Amazon Web Services, including access control via IAM and instance configuration changes with EC2. Any service that reports to CloudTrail is available in Perch.

    Learn more
  • Bitdefender

    Enable managed detection and response for those using the GravityZone platform.

  • Carbon Black Defense

    Gain insight into endpoint detection and response actions on the endpoint to enable new levels of visibility and response.

    Learn more
  • Cisco AMP for Endpoints

    Shorten the cycle between detection and response. Automatically incorporate decision-directing information about endpoints and detected threats.

    Learn more
  • Cisco Duo

    Leverage this identity and access management platform within Perch. In addition, integrate the audit log data from Duo to create actionable notifications.

    Learn more
  • Cisco Firepower

    Bring logs from Cisco Firepower into Perch for analysis and reporting.

  • Cisco Meraki

    Bring visibility into the network and security operations of the Meraki Dashboard.

    Learn more
  • Cisco Umbrella

    Bring logs from Umbrella into Perch to deliver insight and security awareness into your remote endpoints.

    Learn more
  • RMM Monitoring

    Monitor ConnectWise Automate (on-prem) to detect and identify threat activity such as compromised users and computers, and unauthorized activity within the RMM.

    Learn more
  • ConnectWise Control

    Monitor your ConnectWise Control or ScreenConnect environment for signs malicious connection or software deployment activity.

  • ConnectWise Manage

    Interact with the Perch platform and SOC directly from ConnectWise Manage™. Manage and respond to threats seamlessly.

    Learn more
  • Datto Autotask PSA

    Allow Perch’s SOC to open tickets directly in Autotask PSA. Handle Perch tickets efficiently in Autotask using Autotask PSA workflows. View rich analyst and alert information directly in the Autotask PSA ticket.

    Learn more
  • Fortinet

    Collect and analyze FortiGate log data to identify threats and suspicious activities in your environment. Automate response by blocking malicious internet destinations as they’re detected and analyzed.

    Learn more
  • Freshdesk

    Use your current toolsets by creating tickets inside of Freshdesk for Perch alerts and events as they happen.

    Learn more
  • G Suite

    Bring the rich G Suite audit data into Perch to visualize, detect, correlate, and respond to the data seen by G Suite.

    Learn more
  • Mailgun

    Ensure the cloud-hosted platform is operating optimally with on-demand reporting and timely alerting to issues with Mailgun.

    Learn more
  • Microsoft 365

    Monitor Office 365 user and administrator activities in SharePoint, OneDrive, and Outlook. Receive alerts for detected ransomware, email compromise, privilege escalation, account takeovers, file sharing, and more.

    Learn more
  • Microsoft Teams

    Deliver time-sensitive notifications to your Teams channels that are critical for your operations. Get real-time insights into threats escalated by our team, along with other actionable data.

    Learn more
  • MS Defender ATP

    Gain insight into endpoint detection and response actions on the endpoint to enable new levels of visibility and response.

    Learn more
  • Okta

    Correlate and alert on abnormal access attempts and generate reports for the identity and access management platform.

    Learn more
  • Palo Alto

    Collect and analyze Palo Alto log data to identify threats and suspicious activity in your environment. Automate detection and response between Perch and Palo Alto Networks’ Next-Generation Firewall (NGFW) products, and instantly block malicious IPs as soon as they are detected.

    Learn more
  • Salesforce

    Create Salesforce cases to track alerts and information generated by Perch. Enable Perch to monitor, report, and alert on anomalous and malicious activity within Salesforce.

    Learn more
  • SentinelOne

    Collect and analyze log data for activities and threats found on any device with an installed SentinelOne agent.

    Learn more
  • ServiceNow

    Allow Perch’s SOC to open tickets directly in ServiceNow. Handle Perch tickets efficiently in ServiceNow using ServiceNow workflows. View rich analyst and alert information directly in the ServiceNow ticket.

  • Slack

    Want a Slack bot for your Perch setup? Install Perch’s Plugin for Slack and configure it to notify the channel of activity within Perch.

    Learn more
  • Sophos Central

    Deliver security insight into your Sophos products and bring together unified reporting and threat detection.

    Learn more
  • Webroot

    Receive insights in near real-time to act on threats detected with Webroot Endpoint, DNS, and Security Awareness Training.

    Learn more
DEMISTO

Demisto's integration with Perch connects their Security Orchestration, Automation, and Response (SOAR) platform with the Perch application. By integrating with Demisto, Perch further extends with your Enterprise security processes to establish a seamless process for analyzing information and incidents with your other security products.

Demisto.com