Integrations

Connects in 20 minutes, not 20 days.

Direct integration with the cloud security stack your team already uses. No forklift, no professional services engagement, no waiting on vendor sales cycles.

20 min median time-to-connect
7+ SIEM integrations
3 major cloud platforms

Connect your SIEM or log source

Each integration uses the SIEM's native API. No agent installation required on your hosts.

Splunk
REST API
~15 min setup
Elastic SIEM
REST API
~12 min setup
Microsoft Sentinel
Native connector
~20 min setup
Datadog Security
REST API
~10 min setup
AWS Security Hub
Native integration
~8 min setup
Google Chronicle
REST API
~18 min setup
Sumo Logic
Webhook
~12 min setup

Direct cloud log source ingestion

Amazon Web Services
CloudTrail (management + data events)
GuardDuty findings
Security Hub aggregated findings
VPC Flow Logs
IAM Access Analyzer
Microsoft Azure
Defender for Cloud alerts
Azure Activity Logs
Microsoft Sentinel incidents
Entra ID sign-in logs
Google Cloud
Cloud Audit Logs
Security Command Center findings
VPC Flow Logs
Chronicle SIEM

Build a custom connector in under a day

REST API and Webhook support for any log source not on the native integration list. Full API documentation with SDKs for Python, Go, and Node.js.

# POST an alert event via REST API
curl -X POST https://api.cloakmint.com/v1/events \
  -H "Authorization: Bearer $CMNT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "source": "custom_waf",
    "event_type": "suspicious_request",
    "severity": "medium",
    "timestamp": "2026-05-14T11:22:00Z",
    "payload": { ... }
  }'