NEW

Start with the pressure: sales, launch, abuse, agents, data, or guardrails

Use the engagement router

Sign in Scope a Launch Review

Scope a Launch Review

SECENG TRUST SCANNER — INTEGRATIONS

Security evidence should land where the work already happens. Connectors first.

Connect SecEng outputs to engineering, ticketing, collaboration, security, CRM, documentation, learning, and evidence workflows. Native connectors, supported exports, and workflow compatibility are not the same thing.

2supported connectors

40registry entries

14categories

36platforms

24local-first

Start No-Cost Scoping Back to Workbench

Collaboration

6

Slack, Teams, Mattermost, Discord, Google Chat, Telegram

Email & Docs

7

Gmail, Outlook, Word, Sheets, Docs, Notion, SharePoint

CRM

3

HubSpot, Salesforce, Intercom

Developer

3

JetBrains, Eclipse, Raycast

DevOps

2

Azure DevOps, Jira

Design

1

Figma

Local first

24

Designed to stay in the customer environment for supported flows.

On-demand only

9

Leaves only when a user explicitly triggers the scan or sync.

Webhook-backed

7

May route through customer-controlled webhook or server handling.

Manifest format coverage

The target manifest or schema format has been mapped for each platform below. Registry mapping is a planning step, not a built connector - see 2 supported connectors above for what actually ships today.

Slack App Manifest (YAML)1Figma plugin.json1Microsoft Teams manifest.json1WordPress block.json1Office Add-in manifest.xml2Raycast package.json (commands)1Zendesk Apps Framework manifest1Salesforce sfdx-project.json1Google Apps Script (appsscript.json)3Wix wix.config.json1Burp Suite Extension JAR1OWASP ZAP Add-on1Metasploit Auxiliary Module1

Building a Native Product Integration?

Partner integrations need a contract layer before public compatibility claims.

Explore the SecEng Partner Interoperability Framework for scanner findings, attack traces, partner evidence, APC results, workforce content, and learner outcomes.

Explore Partner Interoperability

Full registry

Browse the full registry of 40 workflow integrations.

Supported connectors are highlighted by the live registry. The full registry remains visible for compatibility and planning.

40 of 40 apps

Microsoft Teams

Integrations

Personal tab, channel tab, bot, and message extension for scanning AI/security language in Teams.

Processing mode: On-demand only
Reads: message · thread · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Leaves only when a user explicitly triggers the scan or sync

7 capabilitiesOn-demand only

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Slack

Integrations

Slack App Home, shortcut, modal, slash command, and bot response for scanning trust language.

Processing mode: On-demand only
Reads: message · thread · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Leaves only when a user explicitly triggers the scan or sync

7 capabilitiesOn-demand only

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Mattermost

Integrations

Mattermost slash command and bot webhook for self-hosted security teams.

Processing mode: On-demand only
Reads: message · thread · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Leaves only when a user explicitly triggers the scan or sync

5 capabilitiesOn-demand only

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Zendesk

Integrations

Ticket sidebar app for scanning support replies, security responses, macros, and AI claims.

Processing mode: On-demand only
Reads: ticket · selection · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Leaves only when a user explicitly triggers the scan or sync

5 capabilitiesOn-demand only

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

HubSpot

Integrations

CRM card and workflow webhook for scanning sales/security claims and customer-facing AI language.

Processing mode: Webhook-backed
Reads: record · selection · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: May route through customer-controlled webhook or server handling

5 capabilitiesWebhook-backed

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Google Chat

Integrations

Google Chat app for scanning pasted messages and AI/security claims from Google Workspace conversations.

Processing mode: On-demand only
Reads: message · thread · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Leaves only when a user explicitly triggers the scan or sync

5 capabilitiesOn-demand only

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

JetBrains

Extensions

JetBrains plugin scaffold for scanning prompts, policies, markdown, config, and AI security claims in IDE projects.

Processing mode: Local first
Reads: selection · file · document
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

6 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Eclipse

Extensions

Eclipse plugin scaffold for regulated enterprise teams scanning AI-related source, docs, and policies.

Processing mode: Local first
Reads: selection · file · document
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

6 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Azure DevOps

Integrations

Azure DevOps extension scaffold for scanning work items, wiki pages, pull requests, and pipeline evidence.

Processing mode: On-demand only
Reads: selection · document · file
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Leaves only when a user explicitly triggers the scan or sync

6 capabilitiesOn-demand only

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

ServiceNow

Integrations

ServiceNow app scaffold for AI risk, governance, incidents, exceptions, and evidence workflows.

Processing mode: Webhook-backed
Reads: record · selection · ticket
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: May route through customer-controlled webhook or server handling

6 capabilitiesWebhook-backed

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Discord

Integrations

Discord bot and slash commands for scanning community, support, and product-security language.

Processing mode: On-demand only
Reads: message · thread · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Leaves only when a user explicitly triggers the scan or sync

5 capabilitiesOn-demand only

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Telegram

Integrations

Telegram bot webhook for scanning pasted claims, messages, and community support text.

Processing mode: On-demand only
Reads: message · paste · thread
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Leaves only when a user explicitly triggers the scan or sync

5 capabilitiesOn-demand only

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Figma

Extensions

Figma plugin for scanning text layers, frame annotations, component descriptions, and AI-generated copy for trust and governance language.

Processing mode: Local first
Reads: selection · document · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

5 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Gmail

Integrations

Google Apps Script add-on for scanning email drafts, threads, and pasted text for AI security and trust language risks.

Processing mode: Local first
Reads: selection · document · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

4 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Google Docs

Integrations

Google Apps Script add-on for scanning Docs content, selected text, and pasted policy or vendor language for trust risks.

Processing mode: Local first
Reads: selection · document · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

5 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Google Sheets

Integrations

Google Apps Script add-on for bulk-scanning cell content, vendor responses, AI audit worksheets, and questionnaire answers.

Processing mode: Local first
Reads: selection · document · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

4 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Intercom

Integrations

Intercom app card and webhook for scanning customer support messages, AI bot replies, and security-related conversation text.

Processing mode: Webhook-backed
Reads: message · selection · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: May route through customer-controlled webhook or server handling

5 capabilitiesWebhook-backed

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Notion

Integrations

Notion integration for scanning page content, database properties, and pasted vendor or policy text via the Notion API.

Processing mode: Webhook-backed
Reads: document · selection · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: May route through customer-controlled webhook or server handling

5 capabilitiesWebhook-backed

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Outlook

Integrations

Outlook add-in for scanning email drafts, AI-generated replies, vendor communications, and pasted policy text.

Processing mode: Local first
Reads: selection · document · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

5 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Raycast

Extensions

Raycast extension with paste-and-scan and clipboard commands for scanning trust language anywhere on macOS.

Processing mode: Local first
Reads: paste · selection
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

4 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Salesforce

Integrations

Salesforce Lightning component and Apex trigger scaffold for scanning opportunity text, account notes, and AI-generated customer communications.

Processing mode: On-demand only
Reads: record · selection · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Leaves only when a user explicitly triggers the scan or sync

5 capabilitiesOn-demand only

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

SharePoint

Integrations

SharePoint Framework (SPFx) web part for scanning document libraries, wiki pages, and SharePoint list content for governance and AI trust risks.

Processing mode: Local first
Reads: document · selection · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

5 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Wix

Extensions

Wix app for scanning site copy, AI-generated content, privacy pages, and customer-facing trust claims on Wix-hosted properties.

Processing mode: Webhook-backed
Reads: document · selection · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: May route through customer-controlled webhook or server handling

4 capabilitiesWebhook-backed

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Word

Integrations

Microsoft Word add-in for scanning document content, track-changes text, vendor agreements, and AI-generated policy drafts.

Processing mode: Local first
Reads: selection · document · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

6 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

WordPress

Extensions

WordPress plugin with Gutenberg block for displaying trust scanner summaries on posts, pages, and AI-generated content.

Processing mode: Webhook-backed
Reads: document · selection · paste
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: May route through customer-controlled webhook or server handling

5 capabilitiesWebhook-backed

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Trust Scanner Automation Webhook

Connectors

Generic webhook server and API adapter for routing trust scanner scans from Zapier, Make, n8n, and custom automation pipelines.

Processing mode: Webhook-backed
Reads: paste · document · file
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: May route through customer-controlled webhook or server handling

4 capabilitiesWebhook-backed

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Program CLI

Integrations

Command-line tool for listing, exporting, and analyzing SecEng program blueprints across all target platforms.

Processing mode: Local first
Reads: See detail page
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

4 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Program Dashboard

Integrations

React dashboard for visualizing SecEng program blueprint coverage, progress, and evidence across workstreams.

Processing mode: Local first
Reads: See detail page
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

3 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Program Importer

Connectors

CLI tool for importing SecEng program blueprints into project management platforms from JSON export files.

Processing mode: Local first
Reads: See detail page
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

3 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Program Blueprint for Jira

Templates

Jira-targeted SecEng program blueprint exporter with native issue types, epics, components, and story templates.

Processing mode: Local first
Reads: See detail page
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

3 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Trust Scanner Integrations CLI

Integrations

CLI for listing, inspecting, and exporting the full trust scanner integrations registry to JSON.

Processing mode: Local first
Reads: See detail page
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

3 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Trust Scanner CI

Integrations

GitHub Actions-compatible CLI and action for scanning repository files, PRs, and docs for trust language risks in CI/CD pipelines.

Processing mode: Local first
Reads: See detail page
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

5 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

AIPSA Handbook

Templates

Tauri desktop app providing offline access to the AI Product Security Assurance (AIPSA) handbook, frameworks, and checklists.

Processing mode: Local first
Reads: See detail page
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

2 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

AI Security Speed Run

Templates

Tauri desktop learning tool for rapidly onboarding engineers onto AI security fundamentals, control frameworks, and threat models.

Processing mode: Local first
Reads: See detail page
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

3 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Career Frameworks App

Templates

Tauri desktop app for browsing AI security career ladders, competency maps, and role expectations for security engineering orgs.

Processing mode: Local first
Reads: See detail page
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

2 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

AIPSA Training — SCORM 1.2 Package

Templates

SCORM 1.2 package delivering the AIPSA Field Guide and maturity self-assessment to any SCORM-compatible LMS.

Processing mode: Local first
Reads: lms course · scorm player
Writes: Read-only or summary-only
Data leaves environment: Designed to stay in the customer environment for supported flows

5 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Evidence Connector for Burp Suite

Connectors

Burp Suite extension using the Montoya API to capture HTTP traffic and send findings to the SecEng sidecar.

Processing mode: Local first
Reads: http request · http response · selection
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

4 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Evidence Connector for OWASP ZAP

Connectors

ZAP add-on providing a passive scan rule to detect AI traffic and integrate with the SecEng sidecar.

Processing mode: Local first
Reads: http request · http response
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

4 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Evidence Connector for Metasploit

Connectors

Metasploit auxiliary modules for discovering and fingerprinting AI infrastructure and services.

Processing mode: Local first
Reads: service discovery · file
Writes: May create issues, summaries, evidence, or exports when enabled
Data leaves environment: Designed to stay in the customer environment for supported flows

4 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

AIPSA Training — Moodle XML Quiz

Templates

Moodle XML quiz import with all 132 AIPSA maturity assessment questions, organized by domain with fractional scoring.

Processing mode: Local first
Reads: moodle question bank · moodle quiz
Writes: Read-only or summary-only
Data leaves environment: Designed to stay in the customer environment for supported flows

4 capabilitiesLocal first

Customer/admin configures scopes and permissions where supported. Revoke or uninstall in the host app where supported.

Early access

Want your integration prioritized?

Tell us which platform matters most and we'll prioritize it where it fits the product surface.

Start No-Cost Scoping See the full workbench