← Back to Documentation

Integrations

Connect Pemvosec to your existing tools and workflows. Integrations enable automated scanning, alerting, and remediation across your technology stack.

Git Providers

Connect your source code repositories for automated security scanning on every commit and pull request.

GitHub

Available

Full integration with GitHub repositories, pull requests, and GitHub Actions.

Features

  • OAuth and GitHub App authentication
  • Repository auto-discovery
  • Pull request scanning and comments
  • GitHub Checks API integration
  • Branch protection rule enforcement
  • Code scanning alerts sync

Setup

  1. 1Navigate to ASPM > Integrations
  2. 2Click "Add Integration" and select GitHub
  3. 3Choose authentication method (OAuth or GitHub App)
  4. 4Authorize Pemvosec to access your repositories
  5. 5Select repositories to monitor

GitLab

Available

Integration with GitLab.com and self-hosted GitLab instances.

Features

  • OAuth and Personal Access Token auth
  • Merge request scanning
  • Pipeline integration
  • Security dashboard sync
  • Self-hosted GitLab support

Setup

  1. 1Navigate to ASPM > Integrations
  2. 2Click "Add Integration" and select GitLab
  3. 3Enter your GitLab instance URL (if self-hosted)
  4. 4Provide a Personal Access Token with api scope
  5. 5Select projects to monitor

Bitbucket

Available

Integration with Bitbucket Cloud repositories and pull requests.

Features

  • OAuth authentication
  • Pull request scanning
  • Build status reporting
  • Repository webhooks

Setup

  1. 1Navigate to ASPM > Integrations
  2. 2Click "Add Integration" and select Bitbucket
  3. 3Authorize via OAuth
  4. 4Select repositories to monitor

Azure DevOps

Coming Soon

Integration with Azure Repos and Azure Pipelines.

Features

  • Azure AD authentication
  • Repository scanning
  • Pull request integration
  • Pipeline triggers

Notifications

Get notified about security findings through your preferred communication channels.

Slack

Available

Real-time security alerts and notifications in Slack channels.

  • Channel-based alerts by severity
  • Interactive finding cards
  • Slash commands for quick actions

Microsoft Teams

Coming Soon

Security notifications delivered to Teams channels.

  • Adaptive cards for findings
  • Channel routing by severity
  • Bot commands

Email

Available

Email notifications for critical findings and reports.

  • Configurable alert thresholds
  • Digest emails (daily/weekly)
  • Per-user notification preferences

Webhooks

Available

Generic webhooks for custom integrations.

  • Configurable event triggers
  • Custom payload templates
  • Signature verification

Issue Tracking

Create and track security issues in your project management tools.

Jira

Available

Create and track Jira issues from security findings.

  • Auto-create issues from findings
  • Bi-directional status sync
  • Custom field mapping

ServiceNow

Coming Soon

Integration with ServiceNow ITSM.

  • Incident creation
  • Change requests
  • CMDB integration

Linear

Coming Soon

Create Linear issues for development teams.

  • Issue creation
  • Project mapping
  • Label sync

SIEM & Logging

Forward security events to your SIEM for correlation and compliance.

Splunk

Available

Forward security events to Splunk for correlation.

  • HTTP Event Collector (HEC)
  • Structured event format
  • Real-time streaming

Elastic/ELK

Coming Soon

Send events to Elasticsearch.

  • Index templates
  • Kibana dashboards

Datadog

Coming Soon

Security event forwarding to Datadog.

  • Log forwarding
  • Custom metrics
  • Dashboard integration

Cloud Providers

Connect cloud accounts for cloud visibility, vulnerability scanning, and compliance monitoring.

AWS

Available

Connect AWS accounts for cloud visibility and security.

  • CloudFormation StackSets deployment
  • Cross-account IAM roles
  • AWS Organizations support

Azure

Available

Connect Azure subscriptions for cloud posture management.

  • Azure AD app registration
  • Management Group support
  • Azure Policy integration

Google Cloud

Coming Soon

Connect GCP projects for security monitoring.

  • Service account authentication
  • Organization-level access
  • Security Command Center sync

Webhook Configuration

Pemvosec supports both inbound and outbound webhooks for custom integrations.

Inbound Webhooks

Receive events from external systems (Git providers, CI/CD, etc.)

  • Signature verification (HMAC-SHA256)
  • Event normalization
  • Automatic scan triggering

Outbound Webhooks

Send events to external systems (SIEM, ticketing, custom apps)

  • Configurable event filters
  • Custom payload templates
  • Retry with exponential backoff

Custom Integrations

Build custom integrations using the Pemvosec REST API. Full API documentation is available in the API Reference.

# Example: List findings via API
curl -X GET \
-H "Authorization: Bearer YOUR_TOKEN" \
https://api.pemvosec.com/api/v1/aspm/findings