Skip to content
Warden docs

Integrations

Warden talks to other tools through connections. A connection holds the address and credentials for one tool, and runbook actions use it.

Alerts in

Section titled “Alerts in”

Generic webhook sources take alerts from any tool that can POST JSON. Each source has its own token and a field map that turns the payload into a case.

Actions out

Section titled “Actions out”
  • Chat and paging: Slack, email and paging services
  • Ticketing: Jira and ServiceNow
  • Endpoint and firewall tools, through integration packs
  • Enforcement: CrowdSec and other blocking tools, through response effects that record a time to live and the evidence behind each block

Integration packs bundle the actions for one tool. They are Apache-2.0 content in the Warden repository. The action reference under Guides lists every action with its inputs.