The security stack first. Then the rest of your stack.
Control evidence comes from the cloud, identity, endpoint, vulnerability, and code tools you already run. Beyond those, TruOps connects 800+ apps and APIs, so people, tickets, documents, and evidence come from the systems that already hold them.
TruOps reads control status from cloud (Azure, AWS, Google Cloud), identity (Entra ID, Okta), endpoint (Intune, Defender, CrowdStrike), vulnerability (Tenable, Qualys), and code (GitHub, Azure DevOps), and reads documents from SharePoint and OneDrive. Beyond that, TruOps connects 800+ apps across identity, HRIS, ITSM, CRM, finance, and more. Connectors are read-only. Mapping a new API onto a control is on request. REST API, webhooks, and MCP cover tools that are not in the catalog.
- Your stack already knows control status
- You will not give a GRC tool write access to production
- The connector list has to match what you actually run
- Integrations
- 800+ apps and APIs
- Control evidence
- Cloud, identity, endpoint, vuln, code, documents
- Built by TruOps
- The same catalog you connect in the product
- Access
- Read-only, least-privilege, revocable
The actual challenge
Integrations that require you to change the source tool, or that only exist for a vendor's SOC 2 library, are not how evidence should work.
- The current tool starts empty, or only works for one framework.
- Evidence, vendors, and risk do not share a record.
- AI, if it exists, suggests; it does not do the work with sources.
What you are probably using today
This module is usually replacing a folder, a suite module, or a point tool, not a blank page.
| What you use now | Where it breaks | With TruOps |
|---|---|---|
| CSV exports on a calendar | Already stale. Not linked to a control. | Read-only connectors on a per-control cadence, payload stored. |
| SOC 2 automation tools | They are strong at certification: automated tests, a broad framework library, and often a trust center. Maturity scoring, custom frameworks, and deep risk or vendor work can sit outside that model. | Keep the automation. Run any framework as the anchor, map the rest with partials shown as partial, and run vendor and risk on the same engine. Upload the policies and reports you already have. |
| A SIEM that is "the integration" | Logs are not control status. | Cloud, identity, endpoint, vuln, and code connectors mapped to controls. 800+ more apps connect for the rest of the stack. API / webhooks / MCP when the tool is not in the catalog. |
Bring one real document. Watch the program get set up from it.
First-class control evidence
These are the connectors GRC actually maps to controls. Each check runs on the cadence you set; the payload is stored with its timestamp.
| Category | Connectors | Used for |
|---|---|---|
| Cloud | Microsoft Azure · AWS · Google Cloud | Configuration and policy controls |
| Identity | Microsoft Entra ID · Okta | MFA, access, and account controls |
| Endpoint | Microsoft Intune · Microsoft Defender · CrowdStrike | Device and protection controls |
| Vulnerability | Tenable · Qualys | Scanning and patching controls |
| Code | GitHub · Azure DevOps | Change management and branch protection |
| Documents | SharePoint · OneDrive | Policies, reports, and evidence files |
| Open | REST API · webhooks · MCP | Anything outside the catalog |
One catalog, built into TruOps
Every integration on this page is one you connect from inside TruOps, with the same sign-in flow and the same read-only scopes. The catalog below is the list the product offers, searchable by name or category.
Connecting is not the same as a control test for every app. CrowdStrike and Workday both connect; only the security stack is first-class for continuous control monitoring today. HRIS, ITSM, CRM, and the rest land as people, tickets, documents, and evidence. If a tool is on this page and you need it scored against a control, tell your account team.
Read-only by design
Connectors observe your stack; they do not change it. Scopes are least-privilege and revocation is one click. Proposed fixes are drafts for a person.
The catalog
Security tools first — the connectors GRC maps to controls. Under that, every app and API you can connect from inside TruOps. Connectors stay read-only.
- 800+
- TruOps integrations
- 14
- First-class control-evidence connectors
- 30
- Categories across the stack
- Read-only
- Least-privilege scopes, revocable
Security stack
First-class control evidence, then the identity, cloud, endpoint, vulnerability, code, SIEM, ITSM, and HRIS tools you can connect.
Cloud 13
- Microsoft Azure
- AWS
- Google Cloud
- AWS Inspector2
- AWS Multi-Service
- AWS SigV4 Proxy
- Azure Blob Storage
- Cloudflare
- DigitalOcean
- Google Cloud Storage
- Google Service Account
- Oracle Cloud Identity
- Vercel
Identity 2
- Microsoft Entra ID
- Okta
Endpoint 3
- Microsoft Intune
- Microsoft Defender
- CrowdStrike
Vulnerability 2
- Tenable
- Qualys
Code 2
- GitHub
- Azure DevOps
Documents 2
- SharePoint
- OneDrive
Identity & access 10
- 1Password
- Auth0
- AWS IAM
- Cisco Duo Admin API
- Clerk
- JumpCloud
- LastPass
- OneLogin
- Ory
- WorkOS
HRIS 21
- ADP
- ADP Lyric
- RUN Powered by ADP
- ADP Workforce Now
- ADP Workforce Now Next Generation
- BambooHR
- Deel
- Gusto
- HiBob
- Hibob Service User
- Namely
- Paylocity
- Personio
- Personio Recruiting
- Rippling
- Rippling Shop App
- UKG Pro
- UKG Pro HCM
- UKG Ready
- Workday
- Workday Adaptive Planning
SIEM & observability 6
- Axiom
- Datadog
- Grafana
- PagerDuty
- Sentry
- Splunk
Code & CI/CD 2
- Bitbucket
- GitLab
Endpoint & EDR 7
- Bitdefender
- Jamf Pro
- Kandji
- Malwarebytes
- SentinelOne
- Sophos Central
- Tanium
Documents & storage 12
- Box
- Confluence
- Confluence Data Center
- Dropbox
- Dropbox Sign
- Egnyte
- Google Docs
- Google Drive
- Notion
- OneDrive for Business
- OneDrive Personal
- SharePoint Online
ITSM & ticketing 9
- FreshDesk
- Freshservice
- Incident.io
- Jira
- Jira Data Center
- Linear
- ServiceNow
- Zendesk
- Zendesk Sell
All integrations
Every app and API you can connect from TruOps, grouped by category.
Identity & access 17
- 1Password
- Auth0
- AWS
- AWS IAM
- Cerby
- Cisco Duo Admin API
- Clerk
- Cloudentity
- JumpCloud
- Microsoft
- Microsoft Entra ID
- Okta
- OneLogin
- Oracle Cloud Identity
- Ory
- PingOne
- WorkOS
Developer tools 97
- ADOXX
- Amazon
- Amazon Selling Partner
- Anthropic
- Anthropic Administrator
- Apify
- Atlassian
- Atlassian Cloud Admin
- Atlassian Service Account
- Autosana
- AWS Inspector2
- AWS Multi-Service
- Axiom
- Azure DevOps
- Baserow
- Basin
- Bing Webmasters
- Bitbucket
- Builder.io
- BuiltWith
- Canva
- ChatGPT Enterprise
- ClickHouse
- Cloudflare
- Code Climate
- Codegen
- Contentful
- CrowdStrike
- Cursor
- Cursor Admin
- Datadog
- Devin
- DigitalOcean
- dope.security
- Drata
- Drupal
- Dynatrace
- Eleven Labs
- fal.ai
- Fern
- Gerrit
- Ghost
- GitHub
- GitLab
- Google Gemini
- Google Play
- Google Service Account
- Grafana
- Hail
- ImmyBot
- Juniper Mist
- Klipfolio
- Lovable
- Microsoft Intune
- MiniMax
- n8n
- Neon
- Open Hands
- OpenAI
- PagerDuty
- Perplexity
- Phrase
- Pipedream
- PostHog
- Ragie AI
- Raindrop
- RapidAPI
- Recall.ai
- Render
- Replicate
- Retell AI
- Rootly
- Scavio
- SentinelOne
- Sentry
- Shortcut
- Snowflake
- Sophos Central
- Squarespace
- Statsig
- Supabase
- Tailscale
- Tanium
- Terraform
- Trigger.dev
- Trigify IO
- Twilio
- Vanta
- VEED
- Vercel
- Wakatime
- Webflow
- WooCommerce
- WordPress
- xAI
- Zapier
Storage & documents 15
- AWS SigV4 Proxy
- Azure Blob Storage
- Box
- Dropbox
- Egnyte
- Google Cloud Storage
- Google Drive
- Next Cloud OCS
- NinjaOne SaaS Backup
- OneDrive for Business
- OneDrive Personal
- Orange Logic
- Salesforce
- SharePoint Online
- Smugmug
Knowledge base 13
- Coda
- Confluence
- Document360
- Elevio
- Glean
- Granola
- Guru
- Help Scout Docs
- Notion
- Outline
- Simpplr
- Slab
- Stack Exchange
Ticketing & ITSM 24
- Accelo
- Asana
- Atlassian Government Cloud
- AutoTask
- ClickUp
- Confluence Data Center
- ConnectWise PSA
- Front
- Halo PSA
- Incident.io
- Intercom
- Jira
- Jira Data Center
- Linear
- Luma
- Monday
- Roller
- ServiceNow
- Teamwork
- TickTick
- Todoist
- Trello
- Zendesk
- Zoho Desk
Support 27
- Aircall
- Atlas.so
- Auvik
- BlandAI
- Canny
- Chattermill
- ConnectWise RMM
- Crisp
- Datto RMM
- Dixa
- EvaluAgent
- FreshDesk
- Freshservice
- Freshworks
- Gainsight CC
- Help Scout Mailbox
- HubSpot
- Kandji
- KnowBe4
- Medallia
- N-able N-central
- NinjaOne RMM
- Passportal
- Plain
- PRTG Classic
- RingCentral
- SalesCaptain
HR 57
- ADP
- ADP Lyric
- ADP Workforce Now
- ADP Workforce Now Next Generation
- BambooHR
- Beeline VMS
- Breezy HR
- Bullhorn
- Dayforce
- Deel
- Dialpad WFM
- Employment Hero
- Factorial
- Firstbase
- Freshteam
- Gusto
- Hailey HR
- HiBob
- Hibob Service User
- Hubstaff
- Humaans.io
- JazzHR
- Jobadder
- JobDiva
- Justworks
- Lattice
- Leapsome
- Manatal
- Namely
- Oracle Fusion Cloud
- Pave
- Paychex
- Paycom
- Paycor
- Payfit
- Paylocity
- Personio
- Personio Recruiting
- Recruitcrm
- Recruiterflow
- Rippling
- Rippling Shop App
- RUN Powered by ADP
- Sage HR
- Sage People
- SAP SuccessFactors
- symplr CTM
- Timetastic
- TSheets
- UKG Pro
- UKG Pro HCM
- UKG Ready
- Vincere
- Workday
- WorkRamp
- Zenefits
- Zoho People
ATS 16
- Ashby
- Gem
- Greenhouse
- Greenhouse Harvest
- Greenhouse Harvest Partner
- HackerRank Work
- Jobvite
- Lever
- Lever )
- Recruitee
- Smartrecruiters
- Teamtailor
- Trakstar Hire
- Workable
- Zoho Recruit
Legal 18
- Anrok
- Anvil
- Avalara
- BoldSign
- Certn
- Certn Partner
- Checkr Partner
- Clio
- Datev
- DocuSign
- Dropbox Sign
- HighQ
- Ironclad
- Pandadoc
- Qualia
- SignNow
- Streamline AI
- Thomson Reuters Legal Tracker
Productivity 117
- Acuity Scheduling
- Adobe Workfront
- Agiloft
- Airtable
- Apple Business Manager
- Apple Calendar
- Appstle Subscriptions
- Attention
- Avoma
- Basecamp
- BigChange
- Cal.com
- Calendly
- Canvas LMS
- Circleback
- CompanyCam
- ConductorOne
- DemoDesk
- DocuWare
- Domo
- Envoy
- Ergo
- Expensify
- Fellow
- FigJam
- Figma
- Fireflies
- Float
- Gamma
- Gmail
- Gong
- Google BigQuery
- Google Calendar
- Google Chat
- Google Contacts
- Google Docs
- Google Forms
- Google Maps
- Google Meet
- Google Search Console
- Google Sheet
- Google Slides
- Google Tasks
- Google Workspace Admin
- Grain
- Grammarly
- Grammarly SCIM
- Grist
- Harvest
- Hover
- IT Glue
- Jamie
- Jiminny
- Keeper
- Kintone
- Kintone User API
- LastPass
- Lessonly
- Lokalise
- Lucid
- Lumos
- Make
- Microsoft Excel
- Microsoft People
- Microsoft Planner
- Microsoft Power BI
- Microsoft PowerPoint
- Microsoft Teams
- Microsoft Word
- Mindbody
- Miro
- Missive
- Momentum.io
- Ninety.io
- nocrm.io
- One Note
- Oomnitza
- Ordinal
- Perdoo
- Perimeter81
- Perk
- Pingboard
- Pivotal Tracker
- Planning Center Online
- PreciseFP
- Productboard
- Pushpay ChMS
- Pylon
- Quickbase
- Read.ai
- Readwise
- Readwise Reader
- Roam
- Rocketlane
- ServiceM8
- Setmore
- Simpro
- Slack
- Smartsheet
- Snipe-IT
- Superhuman
- Tally
- Tempo
- Timely
- Timify
- tl;dv
- Toggl Track
- Torii
- Trafft
- WeJam AI
- Workato
- Workpath
- Wrike
- YouCanBookMe
- Zapier NLA
- Zoho Calendar
- Zoho Mail
Communication 43
- 3CX
- 8x8
- ActiveCampaign
- AgentLine
- Bandwidth
- Beehiiv
- Bird
- Bliro
- Braze
- Chatarmin
- Circle.so
- ClickSend
- CloudTalk
- Dialpad
- Discourse
- Fathom
- Glyphic
- Heymarket
- Instantly
- Inteliquent
- lemlist
- LiveSwitch
- Loops.so
- Mattermost
- Microsoft Teams Bot
- Mimecast
- NetSapiens
- Outlook
- Podium
- Postscript
- Reply.io
- Resend
- Ringover
- Salesmsg
- Sedna
- Smartlead.ai
- Telegram
- TextUs
- Tumblr
- Typefully
- Webex
- WhatsApp Business
- Wildix PBX
CRM 64
- Affinity
- AgencyZoom
- Attio
- BetterContact
- Blackbaud
- Buildium
- Chili Piper
- Clay
- Close
- ContactOut
- Copper
- Crunchbase
- eWay-CRM
- FindyMail
- Firefish
- Folk
- Follow Up Boss
- Freshsales
- FullEnrich
- HighLevel
- Holded
- Icypeas
- Insightly
- Jobber
- JobNimbus
- Konnektive
- Kustomer
- Leadfeeder
- LeadMagic
- Lightfield
- Maximizer
- Microsoft Dataverse
- Modjo AI
- NationBuilder
- Ocean.io
- Pipedrive
- Pipeline CRM
- Prospeo
- Reapit Connect
- Redtail CRM
- Rock Gym Pro
- RocketReach
- Salesforce Experience Cloud
- Sellsy
- StoreCensus
- Streak
- SureContact
- Syncore
- Teamleader Focus
- The Swarm
- Twenty CRM
- Unanet
- Unipile
- Upsales
- Vantage Apparel
- Veeva Vault
- Wealthbox
- Wiseagent
- Wiza
- Zendesk Sell
- Zero
- Zoho Bigin
- Zoho CRM
- ZoomInfo
Analytics 33
- Addepar
- Ahrefs
- Altrata
- Amplitude
- Chorus
- Customer.io
- Databricks
- Diffbot
- Everflow
- Exa
- Fairing
- Fiber AI
- Google Analytics
- Hex
- Looker
- Metabase
- Mixpanel
- Nexthink
- Northbeam
- Nyne AI
- Omni Analytics
- Pendo
- People Data Labs
- Podscribe
- Segment
- Semrush
- Splunk
- Statista
- Tableau
- TapClicks
- Trading Economics
- Triple Whale
- Wappalyzer
Accounting 37
- Acumatica
- Candis
- Check
- Conta Azul
- Digits
- e-conomic
- Embat
- Exact Online
- Fortnox
- FreeAgent
- FreshBooks
- INGENIOUS.BUILD
- Intuit
- Mercury
- MIP Cloud
- MIP On Premise
- Moneybird
- MYOB
- NetSuite
- Pennylane
- Quickbooks
- Rydoo
- Sage
- Sage 200
- Sage 300 Construction and Real Estate
- Sage Intacct
- Schwab
- Spendesk
- Tripletex
- Twinfield
- Viewpoint Vista
- Wave Accounting
- Workday Adaptive Planning
- Xero
- Yokoy
- Zoho
- Zoho Books
ERP 17
- Apaleo
- Aspire
- BoondManager
- CDW
- Gebrüder Weiss
- Infor
- Microsoft Business Central
- Microsoft Dynamics 365 Finance and Operations
- Odoo
- Procore
- SAP Ariba
- SAP Business One
- SAP Concur
- SAP Fieldglass
- SAP S/4HANA Cloud
- Toast
- Zuora
Invoicing 3
- Coupa Compass
- Pleo
- Zoho Invoice
Payments 25
- Adyen
- Agentcard
- Autumn
- Bill
- Braintree
- Chargebee
- Checkout.com
- DataCandy
- Fiserv
- Gumroad
- Maxio
- Mollie
- Paddle
- Paypal
- Razorpay
- Robinhood
- Splitwise
- Squareup
- Stripe
- Stripe App
- Stripe Connect
- Stripe Express
- ThriveCart
- Tremendous
- Wise
Banking 4
- Brex
- Finta
- Ramp
- Revolut Business
CMS 5
- Contentstack
- Paligo
- Sanity
- Statamic
- WordPress.com
Design 8
- Adobe
- Autodesk
- Dynamic Mockups
- Getty Images
- Mural
- Onshape
- Stitch
Marketing 54
- A-Leads
- Adyntel
- Amplemarket
- Apollo
- Bitly
- Brevo
- Buffer
- Callrail
- Chartboost
- Clari Copilot
- CleverReach
- Constant Contact
- Cyberimpact
- DiscoLike
- Emarsys
- Emarsys Core API
- Eventbrite
- Google Ads
- HeyReach
- Judge.me
- Keap
- Klaviyo
- KlickTipp
- La Growth Machine
- Linkly
- Listmonk
- Listrak
- Lob
- Mailchimp
- MailerLite
- Mailgun
- Mailjet
- Mandrill
- Marketo
- Meta Ads
- Meta Marketing API
- Microsoft Ads
- MillionVerifier
- Nooks
- Outreach
- ProvenExpert
- Quentn
- SAGE Member
- Salesloft
- SendGrid
- Swoogo
- TheirStack
- Trustpilot
- Valley
- WebinarJam
- Zigpoll
Social 13
- BrightCrowd
- Discord
- LinkHut
- Snapchat
- Strava
- Threads
- TikTok Accounts
- TikTok Ads
- TikTok Personal
- Twitch
- Yahoo
- Yandex
Commerce 37
- Adobe Commerce
- Apple App Store
- Back Market
- BigCommerce
- bol.com
- Booking.com
- Cin7 Core
- Clover
- Commercetools
- EasyPost
- eBay
- Etsy
- Gorgias
- IDS Fulfillment
- Kno Commerce
- Lightspeed Retail
- Loop Returns
- Printful
- Prive
- Recharge
- Redo
- RyderShip
- Sellercloud
- ShipBob
- Shippo
- Shipstation
- Shopify
- Shopify Partner
- SHOPLINE
- Shopware
- Skio
- Stay AI
- Store Leads
- VTEX
- Walmart Marketplace
- Yotpo
- Zoho Inventory
Surveys 7
- Aimfox
- Fillout
- Jotform
- Qualtrics
- Refiner
- SurveyMonkey
- Typeform
Video 5
- HeyGen
- VideoAsk
- Vimeo
- YouTube
- Zoom
Sports 7
- Coros
- Fitbit
- Garmin
- Google Health
- Live Tennis API
- Oura
- Whoop
Gaming 3
- Battle.net
- Epic Games
- Osu
Search 2
- Algolia
- Meilisearch
MCP 4
- Anarlog
- Dualentry
- MCP Server OAuth2
- ScrollStash
Other 49
- Absorb LMS
- athenahealth
- Availity
- Avanan
- Bitdefender
- Cloudbeds
- ConnectSecure
- Dentally
- DrChrono
- ECU360
- Energy Performance Certificates
- Entrata
- Epic
- ePost
- Exist
- Fanvue
- Freepik
- Health Gorilla
- Heap
- Huntress
- Jamf Pro
- Loom
- Malwarebytes
- MEDITECH Greenfield
- ModMed
- Nerdio
- Onlogist
- Optum Real
- Pax8
- PracticeFusion
- Private API
- pVerify
- Quipteams
- ResearchDesk
- Resova
- Revivn
- Scrape.do
- Semble
- ShopVox
- ShopWorks
- Spotify
- Stedi
- TalentLMS
- Transporeon Appointment Scheduling
- Transporeon Carrier Interface
- Uber
- UMAPI
- Unauthenticated
- Zorus
No integrations match that search. Try a vendor name or a category.
Control-monitoring depth is highest on the security stack; other APIs connect for people, tickets, documents, and evidence. Mapping a new API onto a control is on request. REST API, webhooks, and MCP cover tools that are not in the catalog.
How TruOps helps
- Per-control cadence
- Each connected check runs hourly to quarterly, or on demand.
- Evidence stored
- Each result is kept with its timestamp and raw payload.
- Counts across frameworks
- One passing check satisfies every requirement it maps to.
- Least privilege
- Read-only scopes, revocable at any time.
- 800+ integrations
- The same catalog you connect from inside TruOps, searchable on this page.
- API · webhooks · MCP
- For tools that are not in the catalog yet.
Questions
Does TruOps integrate with AWS?
Yes, along with Azure and Google Cloud, as first-class control-evidence connectors.
Does TruOps integrate with Okta and Entra ID?
Yes. Identity controls such as MFA and access are checked from Okta and Microsoft Entra ID.
Is every integration a control monitor?
No. The security stack is first-class for continuous control monitoring. The rest of the catalog connects for people, tickets, documents, and evidence. Mapping a new API onto a control is on request.
Can TruOps change settings in my tools?
No. Connectors are read-only. Proposed fixes are drafted for a person to act on.
What if my tool is not listed?
Use the REST API, webhooks, or MCP, and tell us. We add integrations based on what customers ask for.
Do we have to rip out the tools we already use?
No. Connectors are read-only: they observe cloud, identity, endpoint, vulnerability, and code tools; they do not change them. Spreadsheets, prior reports, and policies upload into the Data Room. If you are on a SOC 2 automation tool or an enterprise GRC suite, you migrate the program (frameworks, evidence, vendors, risks), not the business.
Can we bring our existing assessments, control lists, and vendor files?
Yes. Upload workbooks, reports, policies, and vendor exports. TruOps turns them into structured questionnaires, controls, and register entries, each cited back to the file they came from, for you to review.
Related
Controls checked on your schedule, with stale evidence flagged.
→Use casesContinuous complianceStatus that reflects today, not the last audit.
→Use casesEvidence collectionEvidence collected, dated, and linked, without screenshots.
→CompanyPartnersMSSPs, advisory firms, and technology alliances.
→See it run on your own data.
Thirty minutes with a GRC expert, not an SDR. Bring one real document (a SOC 2 report, a risk register, a vendor list; redacted is fine) and watch TruOps set up a live program from it, with an assessment already pre-filled.