ORION works with the tools already in your security stack
ORION protects data in motion across the applications, infrastructure, and workflows your teams already use. Connect your identity, productivity, cloud, endpoint, and security operations platforms to extend visibility, add context, and prevent data loss.
Featured Integrations


Google Drive
Monitor and classify file activity, detect risky external sharing, and revoke public or external access.


Microsoft 365
Protect data moving through OneDrive, SharePoint, Exchange, and Microsoft 365 Copilot.


Slack
Monitor file uploads, shares, and downloads in Slack for sensitive data exposure.


Wiz
Enrich AWS data-movement traces with Wiz classifications for sensitive data stored in Amazon S3.


Zoom
Deliver mitigation notifications and extend data protection to file activity in the Zoom desktop application.


Arc
Protect sensitive uploads and pasted content in Arc.


Atlassian
Monitor sensitive data moving through Jira and Confluence workflows.


AWS
Monitor downloads of sensitive data from Amazon S3 and connect them to downstream data movement.


BigFix
Enrich investigations with managed-endpoint inventory and ownership data from BigFix.


Bitbucket
Monitor code and file movement across Bitbucket workspaces.


Box
Detect external collaboration invitations and publicly shared links in Box Enterprise.


Brave
Monitor and control sensitive data movement in Brave.


Cato Networks
Extend data-movement visibility with network activity from Cato Networks.


ChatGPT
Detect and prevent sensitive data from being pasted or uploaded to ChatGPT.


ChatGPT Desktop
Protect sensitive files uploaded to the ChatGPT desktop application.


Claude
Protect sensitive data moving into Claude across supported browser, desktop, and coding workflows.


Claude Desktop
Monitor sensitive files moving into and out of Claude Desktop.


Comet
Monitor sensitive data moving through supported Comet workflows.


Cortex XDR
Add Cortex XDR endpoint telemetry and device context to data-loss investigations.


CrowdStrike Falcon
Correlate CrowdStrike endpoint activity with data movement for richer investigations.


Cursor
Monitor sensitive code and files moving through supported Cursor workflows.


Dia
Protect sensitive data shared through supported Dia workflows.


Dropbox
Protect sensitive files moving to personal or unapproved Dropbox accounts.


Duo Security
Enrich data activity with Duo identity and access context.


Exchange Proxy
Inspect outbound Exchange email and prevent sensitive messages or attachments from leaving.


Figma
Detect sensitive files exported from or uploaded through Figma.


Firefox
Monitor sensitive data movement in supported Firefox workflows.


GitHub
Detect repository clones and downloads from GitHub Enterprise and trace where source code moves next.


GitLab
Protect sensitive source code and files moving through GitLab.


Gmail
Monitor and protect sensitive data shared through Gmail.


Google Chrome
Detect and prevent sensitive uploads, downloads, and pasted content in Chrome.


Google Drive
Monitor and classify file activity, detect risky external sharing, and revoke public or external access.


Google Drive for desktop
Monitor files moving through synced Google Drive locations.


Google Gemini
Monitor and control sensitive data pasted or uploaded to Gemini.


Google Identity
Enrich activity with Google Workspace user, group, department, and manager context.


Grip Security
Discover SaaS and AI applications and identify trusted and untrusted destinations using access-risk context.


IBM QRadar
Send ORION detections to IBM QRadar for centralized monitoring and investigation.


Iru
Add Apple device inventory and management context from Iru, formerly Kandji.


Jamf Pro
Add managed-device inventory, ownership, and posture context from Jamf Pro.


Microsoft 365
Protect data moving through OneDrive, SharePoint, Exchange, and Microsoft 365 Copilot.


Microsoft 365 Copilot
Protect sensitive organizational data accessed or shared through Microsoft 365 Copilot.


Microsoft Edge
Protect sensitive data moving through Microsoft Edge.


Microsoft Entra ID
Add Microsoft identity, directory, and group context to data-protection decisions.


Microsoft Intune
Enrich data activity with device inventory and compliance status from Microsoft Intune.


Microsoft Purview
Bring Purview DLP detections and sensitivity labels into ORION for unified investigation and protection.


Microsoft Teams
Protect sensitive files shared through Microsoft Teams in supported browser workflows.


Monday.com
Monitor attachment downloads from monday.com for potential data loss.


Notion
Monitor sensitive data pasted or uploaded to unapproved Notion workspaces.


Okta
Enrich data activity with user profiles, groups, organizational context, and trusted SaaS applications.


OneDrive
Monitor sensitive file activity, downloads, and risky sharing across OneDrive.


OneLogin
Connect user and group context from OneLogin to data-movement activity.


PingOne
Add PingOne identity and group context to data-protection decisions.


Prisma Access
Connect Prisma Access traffic context to sensitive data movement across remote users and applications.


Salesforce
Detect file downloads, uploads, and report exports containing sensitive customer data.


Sentra
Enrich data-movement traces with classifications and business context from Sentra.


SharePoint
Detect sensitive downloads, external sharing, and oversharing across SharePoint sites.


Slack
Monitor file uploads, shares, and downloads in Slack for sensitive data exposure.


Slack Desktop
Detect and control sensitive file movement through the Slack desktop application.


Snowflake
Monitor sensitive data exported from Snowflake and trace where it moves next.


Splunk
Send ORION detections and data-loss context into Splunk security workflows.


Tanium
Add endpoint inventory and device context from Tanium.


Torq
Send context-rich ORION detections into Torq to automate investigation and response.


Webhooks
Send ORION detections and supporting context into existing security and response workflows.


WeTransfer
Detect and prevent sensitive files from being uploaded to WeTransfer.


Detect sensitive files shared through WhatsApp Desktop.


WhatsApp Desktop
Detect sensitive files shared through WhatsApp Desktop.


Wiz
Enrich AWS data-movement traces with Wiz classifications for sensitive data stored in Amazon S3.


Workspace ONE
Connect managed-device and ownership context from Workspace ONE.


Zoom
Deliver mitigation notifications and extend data protection to file activity in the Zoom desktop application.


Zoom Workplace
Monitor sensitive file transfers through the Zoom desktop application.
Don’t see the integration you need?
We’re constantly expanding our integration ecosystem. Let us know what you’d like to connect.
.png)