Ecosystem & Connectivity

Seamless Integration with Your Security Stack

Dispatch real-time cryptographically signed webhooks, orchestrate via REST API, or connect to enterprise ITSM and SIEM solutions.

Available

Real-Time Webhooks

Subscribe to exception.created, exception.status_changed, and evidence.uploaded events with HMAC-SHA256 signature verification.

Header: X-SEM-Signature
🔌
Available

Comprehensive REST API

Automate exception lifecycles directly from Terraform, GitHub Actions, GitLab CI, or internal developer portals using OAuth2/JWT bearer tokens.

OpenAPI 3.1 & JSON Schema
📧
Available

Email & SMTP Alerts

Automated notifications for impending expirations (30, 14, and 7-day intervals), approval requests, and policy renewal warnings.

Custom SMTP & Templates
🔑
Available

Single Sign-On (SSO)

Authenticate seamlessly with Microsoft Entra ID, Okta, PingFederate, and Google Workspace via standard OIDC and SAML 2.0 protocols.

OIDC / SAML 2.0
🎫
Enterprise

Jira & Jira Service Desk

Bi-directional sync between Jira security issues and SEM exceptions. Automatically update Jira ticket statuses on approval decisions.

Enterprise Connector
🏛️
Enterprise

ServiceNow GRC & SecOps

Sync security exceptions and compensating control dossiers directly into ServiceNow Risk and Compliance tables.

SecOps Table Sync
💬
Enterprise

Slack & Microsoft Teams

Interactive bot notifications allowing security leads to review and approve low-risk exceptions directly from chat channels.

ChatOps Notifications
📊
Enterprise

Splunk & Datadog SIEM

Stream immutable audit events and state transition telemetry directly into your enterprise SIEM indexers for SOC correlation.

HEC & Syslog Streams
☁️
Coming Soon

AWS Security Hub & CSPMs

Auto-suppress CSPM findings in AWS Security Hub, Wiz, or Prisma Cloud when an active, approved SEM exception is verified.

CSPM Finding Suppression

Cryptographic Webhook Signatures

Every webhook delivery is signed using an HMAC-SHA256 digest of the payload body.

// Signature Verification in Node.js / Python
import hmac, hashlib

def verify_sem_webhook(payload_bytes, secret, signature_header):
    expected = hmac.new(secret.encode(), payload_bytes, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, signature_header)