Skip to main content
24+ Pre-Built Integrations

Connect Your Entire
Security Stack

35 production integration adapters across API gateways, cloud, ticketing, SIEM, and SOAR — plus a dynamic register_adapter() hook for anything else.

Webhooks are SSRF-hardened by default — every outbound URL is DNS-resolved and rejected if it points at RFC 1918 space. All deliveries are HMAC-SHA256 signed across 14+ event types spanning the four security pillars.

35 Adapters · 4 Categories
SSRF-Protected Webhooks
Dynamic register_adapter()
HMAC-SHA256 Signed
3-Feed Threat Intel
35
Integration adapters
4 categories · extensible
14+
Webhook event types
across all 4 pillars
16
LLM providers
incl. BYOI custom
6
BYOK providers
AES-encrypted at rest
3
Threat-intel feeds
NVD · ThreatFox · OTX
103
Feature flags
11 categories
HMAC-SHA256
Signed deliveries
every webhook
RFC 1918
SSRF blocked
private ranges rejected

Why Integrations Matter

Modern security requires data flowing seamlessly between your entire tool stack

The Integration Challenge

1

Fragmented Security Tools

Teams use 10+ different tools: API gateways, WAFs, monitoring, alerting, ticketing. Each tool operates in isolation.

2

Manual Workflows

Security events require manual intervention: copying data between tools, creating tickets by hand, updating dashboards manually.

3

Slow Response Times

By the time you manually alert your team about a threat, export metrics, and create a ticket, the damage is done.

The G8KEPR Approach

Unified Security Platform

G8KEPR acts as your security hub, connecting to all your existing tools through 24+ pre-built integrations and a comprehensive REST API.

Automated Workflows

Security events automatically trigger actions across your stack: Slack alerts, PagerDuty incidents, Jira tickets, Datadog metrics—all in real-time without manual intervention.

Instant Response

From threat detection to team notification to incident tracking happens in milliseconds. Your entire security workflow executes automatically.

How G8KEPR Integrates

Three powerful integration patterns to fit any workflow

35-Adapter Catalog

24+ ready-to-use integrations with popular services. Configure in the dashboard with just API keys—no code required.

Real HTTP clients, not stubs
Dynamic register_adapter() hook
OAuth & API-key auth flows

REST API

2,952 registered API endpoints across v1 / v2 / v3. OpenAPI/Swagger documentation, language-agnostic, with 1,033 Pydantic validation models guarding every payload.

OpenAPI / Swagger docs generated
1,033 Pydantic-validated models
v1 / v2 / v3 versioning

SSRF-Protected Webhooks

14+ event types across all four pillars. Every outbound URL is DNS-resolved and rejected if it points at RFC 1918 space. HMAC-SHA256 signatures, exponential backoff (base 2.0, 60s initial, 3 retries), encrypted webhook secrets.

RFC 1918 ranges blocked at egress
HMAC-SHA256 signed payloads
Encrypted secrets at rest

Popular Integrations

Connect G8KEPR to your favorite tools across every category

LLM Providers (AI Gateway)

undefined
OpenAIProduction Ready
Anthropic ClaudeProduction Ready
Google Gemini / Vertex AIProduction Ready
AWS BedrockProduction Ready
Azure OpenAIProduction Ready
GroqProduction Ready
MistralProduction Ready
CohereProduction Ready
Together AIProduction Ready
PerplexityProduction Ready
Fireworks AIProduction Ready
DeepSeekProduction Ready
xAI (Grok)Production Ready
Ollama (self-hosted)Production Ready
DeepInfraProduction Ready
Hugging Face InferenceProduction Ready

DevOps & CI/CD

6 files · modules/integrations/api_gateways/
Kong (Admin API HTTP client)Live
ApigeeLive
TykLive
Generic / SidecarLive

Cloud Providers

4 files · S3 / Lambda / DynamoDB
GitHub ActionsProduction Ready
GitLab CIComing Soon
JenkinsComing Soon
CircleCIComing Soon

Monitoring & Observability

undefined
DatadogProduction Ready
PrometheusProduction Ready
GrafanaProduction Ready
New RelicComing Soon

Notifications & Alerting

6 files · Events API v2 (PD)
PagerDuty (Events API v2)Live
JiraLive
OpsGenieLive
Generic Webhook (custom)Live

SIEM Connectors

3 files · HEC / GitHub events
Splunk (HTTP Event Collector)Live
GitHub (repository events)Live
Generic SIEM EngineLive
CEF / LEEF / JSON exportsLive

LLM Providers (AI Gateway)

16 providers · BYOK 6 of them
Anthropic · OpenAI · Google · Azure4 of 16
AWS Bedrock · Groq · Cohere · Mistral4 of 16
DeepSeek · Fireworks · Together · xAI4 of 16
Cerebras · Ollama · BYOI custom3 of 16

Notifications · Email · Threat Intel

Slack · Discord · Teams · DMARC
Auth0Coming Soon
OktaComing Soon
Azure ADProduction Ready
KeycloakComing Soon

Cloud Platforms

undefined
AWSProduction Ready
Google CloudProduction Ready
AzureProduction Ready
DigitalOceanProduction Ready
Generic Webhook Tools Don't Cover This

What G8KEPR Adds That Zapier, Make, & n8n Don't

Five integration capabilities that exist in the platform — not in generic webhook hubs, not in API-key-only proxies, not in YAML-config plugin marketplaces.

SSRF-Protected Delivery

Every outbound webhook URL is DNS-resolved and rejected if any returned IP falls in 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, or 127.0.0.0/8. Only http:// and https:// schemes permitted.

RFC 1918 blockedagentic/webhook_notifier.py
Generic webhook tools deliver to anything.

Plugin Sandbox + Signing

Plugins must carry a cryptographic signature — unsigned ones are rejected. Each runs in a sandbox with CPU, memory, and network limits. Hot reload with versioning, dependency graph resolution, RBAC.

cryptographicplugin_sandbox.py
Marketplace plugins typically run unsandboxed.

Dynamic Adapter Registration

Add a custom API gateway, cloud, ticketing, or SIEM adapter at runtime via register_adapter("name", MyAdapter). Real HTTP clients, not stubs — Kong adapter is a full Admin-API client.

register_adapter()modules/integrations/
YAML-only platforms hit a ceiling fast.

Three-Feed Threat Intel

Async parallel fetch from three feeds (NIST CVE API, abuse.ch malware IOCs, AlienVault OTX pulses) with cross-feed dedup. Per-feed error isolation — one outage does not block the others.

NVD · ThreatFox · OTXthreat_intelligence/pipeline.py
Generic tools have no inbound intel layer.

DMARC + RFC 8058 Email

Header-injection prevention (CRLF/null-byte regex), HTML escaping, RFC 8058 List-Unsubscribe (Gmail/Yahoo 2024 bulk-sender requirement), and a DMARC aggregate report parser tracking SPF/DKIM/DMARC pass rates.

bulk-sender readymodules/email/
Generic SMTP wrappers ship none of this.

Webhook Delivery, Hardened

Most webhook systems trust the destination URL. G8KEPR validates every hop before delivery and signs every payload.

Pre-Delivery Validation
DNS resolve · scheme check
Hostname resolved, every returned IP checked against RFC 1918 ranges. http:// and https:// only. Cloud-metadata addresses (169.254.169.254) blocked at the transport layer.
Signed Delivery
HMAC-SHA256
Every payload signed with HMAC-SHA256 using a per-org webhook secret stored encrypted at rest. Receivers verify the signature to prove the payload is genuine and untampered.
Retry With Backoff
base 2.0 · 60s init · 3 max
On transient failure, exponential backoff retries: 60s, 120s, 240s. After three failed attempts, the delivery is dead-lettered to the audit log with the failure reason.
14+ Event Types · All Four Pillars
api.threat.detectedapi.shadow.blockedmcp.tool.calledmcp.rugpull.detectedmcp.sandbox.violationgateway.budget.exceededgateway.guardrail.violationgateway.cost.anomalyverify.layer.failedverify.suggest.appliedaudit.chain.entryauth.session.suspiciousplugin.signature.invalidintegration.delivery.failed

Why Choose G8KEPR for Integrations?

The most flexible integration platform for modern security teams

Real Adapters, Not Stubs

The Kong adapter is a full HTTP client against the Kong Admin API. The PagerDuty adapter triggers via Events API v2. The Splunk adapter ships JSON to HTTP Event Collector. Each is production code, not a placeholder.

SSRF-Hardened by Default

Automatic retries, exponential backoff, and comprehensive error handling for reliable integration delivery. All events are logged for audit and compliance purposes.

Extend Without a Fork

Need a custom adapter we don't ship? Call register_adapter("name", MyAdapter) at runtime. Plugins are cryptographically signed, sandboxed with CPU/memory/network limits, and hot-reloadable with version rollback.

Frequently Asked Questions

Everything you need to know about G8KEPR integrations

Start Connecting Your
Security Stack Today

24+ pre-built integrations and a comprehensive REST API give you unlimited integration possibilities.
Connect your entire security workflow in minutes.

30-day free trial • No credit card required