---
title: "Supported Integrations"
slug: "supported-integrations"
updated: 2026-09-09T16:09:35Z
published: 2026-09-09T16:09:35Z
canonical: "docs.redcanary.com/supported-integrations"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.redcanary.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Supported Integrations

Zscaler MDR consolidates a diverse array of security providers, allowing you to centrally manage all your alerts and get more value from your security tools.

We analyze both alerts and raw telemetry from endpoint, network, cloud, identity and other data sources, helping you detect cyber threats earlier and stop them faster without disrupting your existing workflows.

The following providers are supported for Investigations in Zscaler MDR:

| **Provider** | **Supported Platform** | **Class of Security Data** | **Ingest Type** |
| --- | --- | --- | --- |
| Amazon Web Services | [AWS](/doc/docs/integrate-amazon-web-services-with-red-canary) | Cloud | API |
| Broadcom | [Carbon Black Cloud](/doc/docs/how-red-canary-works-with-carbon-black-cloud) | EDR | API |
| Broadcom | [Carbon Black EDR](/doc/docs/install-and-uninstall-the-carbon-black-edr-sensor) | EDR | API |
| Cisco | [Duo](/doc/docs/integrate-cisco-duo-with-red-canary) | Identity | API |
| Cisco | [Firepower](/doc/docs/integrate-cisco-firepower-with-red-canary) | Network | Email, Syslog |
| Cisco | [Meraki](/doc/docs/integrate-cisco-meraki-with-red-canary) | Network | HTTP |
| Cisco | [Umbrella](/doc/docs/integrate-cisco-umbrella-with-red-canary) | Network | Email |
| CrowdStrike | [Falcon Identity Protection](/doc/docs/integrate-crowdstrike-falcon-identity-protection-with-red-canary) | Identity | API |
| CrowdStrike | [Falcon Insight XDR](/doc/docs/how-red-canary-works-with-crowdstrike-falcon) | EDR | API |
| Darktrace | [ActiveAI Security Platform](/doc/docs/integrate-darktrace-enterprise-immune-system-with-red-canary) | Network/Internet of Things | Email |
| Dragos | [Platform](/doc/docs/integrate-dragos-with-red-canary) | Operational Technology (OT) | Syslog |
| ExtraHop | [Reveal(x)](/doc/docs/integrate-extrahop-revealx-with-red-canary) | Network | API |
| ExtraHop | [Enterprise](/doc/docs/integrate-extrahop-reveal-x-enterprise-with-red-canary) | Network | HTTP |
| Fortinet | [FortiAnalyzer](/doc/docs/integrate-fortinet-fortigate-via-fortianalyzer-with-red-canary) | Network | Syslog |
| Fortinet | [FortiGate](/doc/docs/integrate-fortinet-fortigate-with-red-canary) | Network | Syslog |
| Google | [Cloud Platform (GCP)](/doc/docs/integrate-google-cloud-platform-gcp-with-red-canary) | Cloud | API |
| Google | [Workspace](/doc/docs/integrate-google-workspace-with-red-canary) | SaaS | API |
| Jamf | [Pro/Protect](/doc/docs/integrate-jamf-edr-with-red-canary) | EDR | API |
| Lacework | [FortiCNAPP](/doc/docs/integrate-lacework-with-red-canary) | Cloud | API |
| Microsoft | [Azure](/doc/docs/integrate-with-microsoft-azure) | Cloud | API |
| Microsoft | [Defender for Cloud](/doc/docs/integrate-microsoft-defender-for-cloud-with-red-canary) | Cloud | API |
| Microsoft | [Defender for Cloud Apps](/doc/docs/integrate-microsoft-defender-for-cloud-apps-with-red-canary) | Identity | API ([via Microsoft Graph](/doc/docs/integrate-microsoft-graph-with-red-canary)) |
| Microsoft | [Defender for Endpoint](/doc/docs/how-red-canary-works-with-microsoft-defender-for-endpoint) | EDR | API Poll ([via Microsoft Graph](/doc/docs/integrate-microsoft-graph-with-red-canary)) |
| Microsoft | [Defender for Identity](/doc/docs/integrate-microsoft-defender-for-identity-with-red-canary) | Identity | API ([via Microsoft Graph](/doc/docs/integrate-microsoft-graph-with-red-canary)) |
| Microsoft | [Defender for Office 365](/doc/docs/connect-red-canary-to-office-365) | Email | API Poll ([via Microsoft Graph](/doc/docs/integrate-microsoft-graph-with-red-canary)) |
| Microsoft | [Entra ID](/doc/docs/integrate-microsoft-entra-id-with-red-canary) | Identity | API |
| Microsoft | [Entra ID Protection](/doc/docs/integrate-microsoft-entra-id-protection) | Identity | API ([via Microsoft Graph](/doc/docs/integrate-microsoft-graph-with-red-canary)) |
| Microsoft | [Office 365 Management API](/doc/docs/connect-red-canary-to-office-365) | Aggregate | API |
| Okta | [Workforce Identity](/doc/docs/integrate-okta-workforce-identity-with-red-canary) | Identity | API |
| Palo Alto | [Cortex XDR](/doc/docs/integrate-cortex-xdr-with-red-canary) | EDR | API |
| Palo Alto | [PAN-OS](/doc/docs/integrate-palo-alto-pan-os-with-red-canary) | Network | Syslog |
| Palo Alto | [Threat Prevention](/doc/docs/integrate-palo-alto-networks-threat-prevention-with-red-canary) | Network | Syslog |
| Palo Alto | [Wildfire](/doc/docs/integrate-palo-alto-networks-wildfire-with-red-canary-via-syslog) | Network | Email, Syslog |
| SentinelOne | [Singularity](/doc/docs/integrate-sentinelone-cloud-funnel-20-with-red-canary) | EDR | API |
| Trend Micro | [Vision One](/doc/docs/integrate-trend-vision-one-with-red-canary) | EDR | API |
| Wiz | [Wiz](/doc/docs/integrate-wiz-with-red-canary) | Cloud | API |
| Zscaler | [Zscaler OneAPI](/doc/docs/integrate-zscaler-oneapi-with-red-canary) | Network | API |