Integrations

Works with

Complass exchanges data with these tools and formats: connected directly or by importing their result files.

Connected directly

• Identities, evidence
• Microsoft Teams
• Slack
• JiraCloud and Data Center
• ServiceNow
• Microsoft Entra IDIdentities, evidence
• Microsoft 365Licences

Import results

• 
• 
• 
• Grype
• 
• 
• 
• Nmap
• 
• 
• 
• OWASP Dependency-Check
• Zeek
• Microsoft Sentinel
• Elastic
• Microsoft Entra ID
• Active Directory
• Azure Backup

Open formats

• 
• 
• 
• XCCDF
• 
• SPDX
• SARIF

Product names and trademarks belong to their respective owners. There is no partnership, certification or endorsement by the owners. Trademark notices

They only show which tools and formats Complass exchanges data with. Active Directory, Azure, Microsoft, Microsoft 365, Microsoft Entra, Microsoft Sentinel and Microsoft Teams are trademarks of the Microsoft group of companies. Jira is a trademark of Atlassian. Slack is a trademark of Slack Technologies, LLC. ServiceNow is a registered trademark of ServiceNow, Inc. GitHub is a trademark of GitHub, Inc. Elastic is a trademark of Elasticsearch B.V. Tenable Nessus is a registered trademark of Tenable, Inc. Nmap is a registered trademark of the Nmap Project. MITRE ATT&CK® is a registered trademark of The MITRE Corporation. CSAF is a standard of OASIS Open, the logo is from OASIS. XCCDF is a format of NIST SCAP; the NIST logo only names the format and does not mean a test, validation or endorsement by NIST. Grype logo by Anchore, CC BY 4.0.

Measures as tickets

Whoever works in the ticket system gets the task there. Complass remains the source of evidence and status.

• One click from the measure or incident, with a link back to Complass.
• Status and comments are synchronised; done in the ticket means done in Complass if you set it up that way.
• You map people and groups once.
• Jira Data Center and ServiceNow instances are approved before the first connection.
• Zammad is coming soon: tasks one by one or in bulk as a ticket; you confirm in Complass what is done in Zammad.

Connectors: inventory, identities, evidence

Connectors read inventory, accounts and settings regularly. Complass never writes back.

• IT: NetBox, Snipe-IT, Microsoft Intune and Defender, Lansweeper.
• Identities: accounts, groups and permissions from Microsoft Entra ID and GitHub for access reviews.
• OT: Nozomi, Tenable OT, Claroty CTD and Defender for IoT via a relay script in your network, without an inbound connection.
• In beta: Armis, Claroty xDome, Tenable One and Nozomi Vantage.
• Credentials stored encrypted and never shown again after saving.
• Evidence: settings from Microsoft Entra ID, Microsoft 365 and GitHub, once a day, with a traffic light at your requirements. Numbers are stored, not names of people.
• Licences: purchased and assigned Microsoft 365 licences per product for the licence reconciliation.
• For Microsoft and GitHub you set up your own app, which you can revoke at any time.

Beta: Qualys, Rapid7, Okta, Splunk, Microsoft Sentinel and device compliance from Intune are available as a beta where your package includes connectors: free during the beta, no service commitment (SLA). Read-only until the test against the real system has passed: Microsoft Intune, Qualys VMDR, Rapid7 InsightVM, Okta, Splunk, Microsoft Sentinel. There the connector imports and shows the data but closes and changes nothing automatically.