ResourcesIntegrations

Works withthe stack you already run.

Ana connects to your IDE, cloud, repositories, pipelines, observability, security scanners and ticketing - reading what it needs, and acting through the tools and approvals you already trust.

Integrations
Security tools
IDEs
VS Code · IntelliJ
Clouds
AWS · Azure · GCP

CI/CD & GitOps

Ana reads pipeline runs, diagnoses failures and ships fixes through the pipelines you already trust.

Observability

Metrics, logs and traces Ana correlates to find root cause and verify every fix.

Security testing

Findings Ana pulls live or imports, de-duplicates, ranks by real exposure and turns into fixes.

Wiz logoLive connection

Wiz

Cloud security findings pulled live from Wiz, plus Wiz CLI results for IaC, images and directories.

See how Ana uses it →
Checkmarx logoLive connection

Checkmarx

SAST findings from Checkmarx and Checkmarx One, connected live or imported.

See how Ana uses it →
Invicti (Netsparker) logoLive connection

Invicti (Netsparker)

Dynamic application security testing results from Invicti and Netsparker.

See how Ana uses it →
Horizon3.ai NodeZero logoLive connection

Horizon3.ai NodeZero

Autonomous pentest results from NodeZero.

See how Ana uses it →
Secureworks Taegis logoLive connection

Secureworks Taegis

Detections and investigations from Secureworks Taegis XDR.

See how Ana uses it →
Snyk logoReport import

Snyk

Snyk Code findings imported, ranked by reachability and fixed with tests.

See how Ana uses it →
SonarQube logoReport import

SonarQube

Code quality and security issues from SonarQube.

See how Ana uses it →
Veracode logoReport import

Veracode

Static and dynamic findings from Veracode.

See how Ana uses it →
OpenText Fortify logoReport import

OpenText Fortify

Fortify static analysis results.

See how Ana uses it →
HCL AppScan logoReport import

HCL AppScan

Application security testing results from HCL AppScan.

See how Ana uses it →
Acunetix logoReport import

Acunetix

Web vulnerability scanning results from Acunetix.

See how Ana uses it →
Rapid7 AppSpider logoReport import

Rapid7 AppSpider

DAST results from Rapid7 AppSpider.

See how Ana uses it →
AppCheck logoReport import

AppCheck

Web application scanning results from AppCheck.

See how Ana uses it →
Qualys logoReport import

Qualys

Qualys WAS, infrastructure and HackerGuardian scan results.

See how Ana uses it →
Tenable logoReport import

Tenable

Vulnerability scan results from Tenable.

See how Ana uses it →
Aqua Security logoReport import

Aqua Security

Container and image vulnerability results from Aqua.

See how Ana uses it →
Anchore & Grype logoReport import

Anchore & Grype

Image vulnerabilities and policy results from Anchore Engine, Anchore Enterprise, anchorectl and Grype.

See how Ana uses it →
AWS Security Hub logoReport import

AWS Security Hub

Aggregated AWS security findings.

See how Ana uses it →
Amazon Inspector logoReport import

Amazon Inspector

Workload vulnerability findings from Amazon Inspector.

See how Ana uses it →
Prowler logoReport import

Prowler

AWS security best-practice checks from Prowler.

See how Ana uses it →

Don’t see your tool?

Ana reads more than this list.

Security reports in standard formats, internal APIs and custom pipelines can usually be connected. Tell us what you run.