Integrations

Connect the tools you already run.

Thirteen first-party connectors, plus the full SAP module and a generic webhook. Inbound and bidirectional — so incidents, CIs, and alerts flow where they need to.

Identity

Microsoft 365 / Entra ID

Inbound user/group sync from Entra ID via Graph; outbound provisioning is a declared capability for lifecycle events.

Active Directory (LDAP)

Read-only, scheduled sync of users and groups from your own on-prem AD or OpenLDAP directory.

Microsoft Intune / SCCM

Managed devices sync into the CMDB as Workstation CIs, with compliance state, detected apps, and patch status.

Monitoring & APM

Datadog

Monitor and Events API alerts become incidents; host inventory syncs into the CMDB; incident state pushes back as a Datadog event.

On-call

PagerDuty

Bidirectional incident sync and a cached read of on-call schedules.

Security / SIEM

Microsoft Sentinel

Security alert→incident creation with severity and MITRE ATT&CK tactic mapping.

CrowdStrike Falcon

Detection alerts feed into incident and CI records; RTR host-isolate is roadmapped, not available yet.

Tenable / Qualys / Rapid7

One adapter covers all three scanners. Findings become CVEs on the matched CMDB CI.

Collaboration

Slack

Slash commands, mirrored channel comments, and notifications. US-resident by default.

Microsoft Teams

The same command grammar and comment mirroring as Slack, delivered as a Teams bot. EU-resident by default.

Backup & Virtualization

Veeam Backup

Backup job status linked to CIs for recovery assurance; failed jobs open incidents. Restore is roadmapped, not available yet.

VMware vSphere

VM and ESXi host inventory sync into the CMDB from vCenter, read-only.

Citrix Virtual Apps and Desktops

Machine catalogs, delivery groups, and sessions sync as CIs; Director session failures open incidents.

SAP

SAP (full module)

Transport-as-Change, STMS sync, landscape mapping, collision detection.

Extensibility

Generic Webhook

Inbound webhooks for any tool not covered by a first-party adapter, mapped by a tenant-configured field mapping.

One framework underneath

Built on a single integration platform.

Every connector runs on the same platform: OAuth 2.0 where the vendor supports it, credentials sealed in a KMS with every read and rotation logged, per-tenant rate limiting with automatic retry, and HMAC-signed inbound and outbound webhooks with idempotency. A health view asks you to acknowledge each provider's EU-residency posture before you connect.

In v1, every connector is read-or-sync only. Destructive actions — isolating a host, restoring a backup, reverting a VM, auto-importing an SAP transport — are held back for a later release, behind per-action consent and permissions.

Don't see your tool?

The generic webhook adapter covers any tool that sends or receives HTTP. Need a dedicated adapter? Talk to us.

Get in touch

See TENSOR running on your own estate.

30 minutes, screen-shared, no slides. Bring the process you are least sure we handle and we will start there.

Request a demo Talk to us