Integration Fundamentals

Material’s flexible architecture is built to connect with virtually any tool in your environment, ensuring your cloud workspace data is accessible wherever your team does their best work.

You can integrate Material’s cloud workspace detection and response capabilities with the rest of your security and IT ecosystem by connecting to the rest of your stack with a built-in or custom integration.

Integration Types

Material uses webhooks and event subscriptions to send data to downstream tools. Specific events like a change in severity, specific detection, user action in a message, and more trigger the outbound notifications.

• Native integrations in Material are pre-configured with recommended events. Often you just need to create your receiver and paste that information into the integration in Material. Follow the guides linked below.
• If you don't see your preferred tool listed, you can use a custom integration to connect to nearly any downstream tool.

Choose a category to learn more:

Identity

Integrate with your preferred identity providers to verify end-user credentials, sync information, receive security alerts, etc.

Messaging and Ticketing

Integrate with any message or ticketing tool that's not listed in our native integrations with a custom message and ticket integration.

SIEM

Integrate your SIEM (Security Information and Event Management) tools with Material to send data like logs and threat data to use downstream for automated SIEM playbooks and more.

SOAR

Material pushes workspace events to your SOAR (Security Orchestration, Automation, and Response) in real-time. When a critical incident occurs, your playbooks trigger instantly with the full picture already attached, drastically cutting down your mean time to respond.

Webhook

Trigger outbound delivery based on a specific event like a change in severity, specific detection, user action in a message, and more. Use this option when no other category fits your tool.

Events

Beginning in version 1.51:

• Existing subscriptions using the case events still work and you can still edit them
• case events can't be use for new subscriptions

Learn more here.

How to view event documentation

1. Log in to Material.
2. From the toolbar in the upper-right, click Integrations.
3. Expand API.
4. From the left, browse the documentation or click Tokens to create API tokens.