Find a source to see how it connects and what permissions it needs. Availability tells you how to set it up. Source health shows whether it is collecting on your instance.
Available now: console setup. On your instance: sensor setup. Available on request: assisted activation by Sheer Safe.
Google Workspace
Available now
Sign-in, admin and OAuth audit activity from your Workspace tenant.
Admin access and the documented API delegation are required.
Microsoft 365
Available now
Supported audit activity from Exchange, SharePoint and Teams.
Vendor licensing and audit/API permissions apply.
AWS
Available now
CloudTrail activity and findings from supported AWS security services.
Read-only role; select the region and enable relevant services. Coverage is not automatically account-wide across all regions.
GitHub
Available now
Organization audit events for access, repository settings and security changes.
GitHub Enterprise Cloud is required for the monitored audit-log API. Source-code scanning is not included.
GitLab
Available now
Supported group audit activity for access and configuration changes.
Group permissions and vendor-plan requirements apply.
Cloudflare
Available now
Supported account audit activity from your Cloudflare environment.
Use the documented account-scoped read permissions.
Suricata IDS
On your instance
Network intrusion alerts from the configured sensor.
Sensor placement determines visibility. An on-box sensor does not monitor every customer network by default.
Wazuh
On your instance
Host-security and file-integrity signals from configured agents and sources.
Customer-host coverage depends on agent deployment and configuration.
Microsoft Entra ID
Available on request
Sign-in and directory activity for supported identity detections.
Assisted setup and tenant permissions apply.
Atlassian
Available on request
Supported Jira, Confluence and organization audit activity.
Products and authentication are configured separately.
Azure
Available on request
Azure Activity Log and supported Defender for Cloud alerts.
Subscription permissions and service availability apply.
Google Cloud
Available on request
Supported cloud audit activity from your Google Cloud environment.
Agreed project/organization scope and permissions apply.
CrowdStrike
Available on request
Supported Falcon detections and event-stream activity.
Existing vendor product and API entitlement required.
SentinelOne
Available on request
Supported threat and activity records from SentinelOne.
Existing vendor product and API permissions required.
Kandji
Available on request
Supported device and enrollment activity from Kandji.
Existing MDM deployment and API access required.
JumpCloud
Available on request
Supported directory and SSO activity from JumpCloud.
Existing deployment and API permissions required.
Your agreed coverage, vendor requirements and permissions are confirmed during setup.
SheerSight by Sheer Safe Pvt Ltd
Included at no extra platform charge with every Sheer Safe engagement.