Integrations
Connects with your stack
PhishFortress integrates seamlessly with Microsoft 365, leading SIEM platforms, identity providers, and the tools your team already uses.
Microsoft Exchange Online
Microsoft 365
Full email flow monitoring with read-only Graph API access. Analyze headers, metadata, attachments, and URLs in real-time.
Microsoft Entra ID
Microsoft 365
Sign-in activity monitoring, conditional access policy analysis, and identity-based threat detection.
Microsoft Defender
Microsoft 365
Enrich PhishFortress detections with Defender threat intelligence and correlate alerts across platforms.
Microsoft Teams
Microsoft 365
Monitor Teams messages and file sharing for phishing links, malicious files, and social engineering attempts.
Splunk
SIEM & SOAR
Stream PhishFortress alerts and threat data directly to Splunk for centralized security event management.
Microsoft Sentinel
SIEM & SOAR
Native integration with Azure Sentinel for cloud-native SIEM correlation and automated investigation.
Palo Alto XSOAR
SIEM & SOAR
Automate investigation and response workflows with PhishFortress data enrichment and remediation actions.
Okta
Identity
Correlate email threats with identity signals from Okta for comprehensive user risk scoring.
CrowdStrike
Identity
Combine endpoint telemetry with email threat data for full kill-chain visibility and response.
ServiceNow
Productivity
Automatically create and update security incidents in ServiceNow when threats are detected.
Slack
Productivity
Send real-time threat alerts and security notifications to dedicated Slack channels.
REST API
Productivity
Full programmatic access to PhishFortress data, configurations, and automation capabilities.
Developer-First
Build custom integrations with our API
Full REST API access with OAuth 2.0 authentication, webhook support, and comprehensive documentation. Integrate PhishFortress into any workflow.
import { PhishFortress } from '@phishfortress/sdk'
const client = new PhishFortress({
apiKey: process.env.PF_API_KEY,
tenantId: 'your-tenant-id'
})
// Get recent threats
const threats = await client.threats.list({
severity: 'critical',
status: 'active',
limit: 25
})
// Subscribe to real-time events
client.webhooks.create({
url: 'https://your-app.com/webhook',
events: [
'threat.detected',
'threat.quarantined',
'user.compromised'
]
})Ready to connect PhishFortress?
Setup takes less than 10 minutes. No agents, no infrastructure changes.