Skip to main content

​
Available integrations

​
Source code

GitHub

GitHubView pull requests, commits, file diffs, reviews, and inline comments. Approve PRs and post comments without leaving Pwnbook.

GitLab

GitLabReview merge requests, diffs, and approval status from GitLab without leaving Pwnbook.

​
SAST / SCA / Code security

Semgrep

SemgrepPull SAST findings, secrets detection results, and supply chain issues from Semgrep.

Checkmarx One

CheckmarxImport SAST findings from Checkmarx One.

Snyk

SnykImport open source, container, IaC, and code vulnerability findings from Snyk.

Aikido Security

AikidoContinuous scanning for code vulnerabilities, secrets, dependencies, and cloud misconfigurations.

Arnica

ArnicaCode security posture management: hardcoded secrets, risky code changes, and supply chain threats.

Corgea

CorgeaAI-assisted SAST findings with auto-fix suggestions for accelerated remediation.

Endor Labs

Import dependency findings with reachability analysis to prioritize supply chain risk.

​
API security

Escape

Import API security scan results from Escape to track vulnerabilities in your REST, GraphQL, and gRPC APIs.

​
Cloud security

AWS

AWSDiscover resources, identify security misconfigurations, and import infrastructure for analysis.

Wiz

WizPull cloud security posture findings and vulnerability data from your Wiz environment.

​
Endpoint security (EDR)

CrowdStrike Falcon

CrowdStrikeView endpoint detections, incidents, and agent health from CrowdStrike Falcon.

SentinelOne

SentinelOneSurface active threats, agent health, and STAR alerts from SentinelOne.

​
Bug bounty

HackerOne

HackerOneManage bug bounty and VDP reports from your HackerOne program.

​
Issue tracking

Jira

JiraPush findings and tasks to Jira issues and link security work to your engineering backlog.

Linear

LinearCreate Linear issues from findings and view your team’s issue backlog in Pwnbook.

​
Knowledge base

Connect a wiki or docs tool as context for Workflows — browse pages and tag the ones AI skills should pull as reference material.

Notion

Browse and tag Notion pages as context for AI skills.

Confluence

Browse and tag Confluence pages as context for AI skills.

Coda

Browse and tag Coda pages as context for AI skills.

​
Incident management

incident.io

Track active incidents, view severity breakdowns, and link security findings to incident response.

PagerDuty

PagerDutyView active incidents, on-call schedules, and service health from PagerDuty.

​
Email security

dmarcian

View DMARC report data and email authentication coverage across your domains.

KnowBe4

KnowBe4Track phishing simulation click rates and security awareness training completion.

​
Network security

Fastly

Monitor WAF rule violations and traffic security data from your Fastly services.

​
Supply chain

Socket.dev

Socket.devMonitor supply chain alerts for malicious and risky open source packages.

​
Compliance

Vanta

VantaPull compliance controls, security tests, evidence requests, and vendor management data from Vanta.

​
Security data pipeline

Monad

Monitor security data pipeline health — running, failed, and healthy pipeline counts.

​
Secrets management

1Password

1PasswordReference secrets stored in 1Password when configuring integrations in Pwnbook.

Bitwarden Secrets Manager

BitwardenStore integration credentials in Bitwarden and reference them in Pwnbook with .

​
Notifications

Slack

SlackReceive notifications about security events and findings directly in your Slack channels.

​
The marketplace

Integrations are managed through the Marketplace — the central place to browse, enable, and configure add-ons for your organization.
1

Open the marketplace

Go to Settings → Marketplace.
2

Find an integration

Browse the list or search by name. Each card shows the integration name, category, and whether it’s currently enabled.
3

Enable and configure

Click an integration to view setup instructions, then click Enable or Configure to complete setup.
Enabled integrations can be toggled off at any time. Disabling an integration stops data sync but does not delete previously imported data.

​
External sources

Some integrations appear as external sources in the sidebar — fully-featured views embedded directly into Pwnbook. GitHub and GitLab are external sources, giving you a native PR/MR review experience without leaving the platform.

​
Two-tier authentication model

Pwnbook uses two levels of credentials for integrations:

​
Org-level connections

Configured by an Admin or Owner in Organization Settings → Marketplace. Org connections power data sync, read views, and platform-initiated actions (creating issues, sending notifications). These use a service account or shared API key owned by the organization.

​
Personal connections

Configured per user in Profile → Connections. Personal connections let Pwnbook act on your behalf — adding comments, transitioning issues, approving pull requests — so actions appear under your own identity in the external tool. Integrations that support write actions (GitHub, GitLab, Linear, Jira, Bitbucket) benefit from a personal connection. If you don’t configure one, write actions fall back to the org-level credential.

​
Integration permissions

Enabling org-level integrations requires Admin or Owner access. Personal connections can be configured by any team member from their Profile page.

​
Categories

​
Webhook security

Integrations that communicate via inbound webhooks (such as GitHub) validate payload signatures. Never expose webhook endpoints without signature validation, and treat webhook secrets like any other credential.