A categorized index of every connector documented under Data Sources. For the general connection flow shared by all of them, see Connect Data Sources.
Identity & directory
Connect Microsoft Entra ID — users, groups, devices, sign-in logs, conditional access, privileged accounts and PIM roles, Identity Protection risks
Connect Google Workspace — users, groups and group members, Chrome OS and mobile devices, sign-in logs
Connect Okta — users, groups, MFA factors and events, admin roles, SSO app assignments, policies, API tokens
Connect Active Directory (Local Connector) — on-premises domain through the Harven Local Connector: users, computers, groups and nested memberships, password policies, trusts
Endpoint security & EDR
Connect Microsoft Defender for Endpoint — alerts, incidents, machines, per-device vulnerabilities and secure configuration compliance, secure scores
Connect Microsoft Intune — managed devices, detected apps, health attestation, Defender Antivirus state, compliance and configuration by setting
Connect SentinelOne — threats, agents, alerts, activities, IOCs, sites and groups, installed applications, STAR custom rules, exclusions, blocklist
Connect BitDefender GravityZone — endpoints, posture, incidents, patches
Connect NinjaOne (NinjaRMM) — managed devices, OS and software patches with install history, antivirus status and threats, installed software, device health, BitLocker volumes
Connect Trend Micro Vision One — Workbench alerts, endpoints, ASRM score, audit trail
Network & SIEM
Connect Cloudflare — account members, API tokens, Zero Trust Access and devices, DNS, TLS, WAF rules, Security Center findings
Connect FortiAnalyzer — supervised devices, FortiGate traffic logs, incidents
Connect Sekoia.io — alerts, cases, assets, detection rules, events
Connect SonicWall SonicOS (Local Connector) — firewall through the Harven Local Connector: access rules, NAT, interfaces and zones, security services, VPN, certificates, admin hardening
Connect Zscaler — ZIA users, admins and roles, cloud firewall rules, web DLP rules and the sensitivity labels they target, Shadow IT applications, ZPA App Connectors, application segments and policy rules, Client Connector devices, ZIdentity users
Cloud infrastructure
Connect Microsoft Azure — VMs, storage, RBAC and PIM role assignments, network, SQL, key vaults
Connect Amazon Web Services (AWS) — EC2 instances and AMIs, network exposure, load balancers, IAM users, roles and MFA, EBS volumes, S3 buckets, CloudTrail, WAF
Connect Scaleway — instances, volumes, security groups and flexible IPs, Object Storage buckets, organization IAM, Managed Databases, Secret Manager and Key Manager
Connect Google BigQuery — tables from a BigQuery dataset
SaaS governance, CASB & DLP
Connect Microsoft Defender for Cloud Apps — entities, alerts, IP ranges, discovery reports, discovered apps (preview)
Connect Microsoft Purview — DLP alerts, sensitivity labels
Connect SharePoint (Admin) — external-sharing governance (tenant-admin API)
DevOps
Connect GitHub — org members, repos, Dependabot alerts, access tokens
Connect GitLab — users, memberships, access tokens, projects, dependencies
IT service management
Connect Opsgenie (Atlassian) — alerts, incidents, teams, users, on-calls
Connect ServiceNow — users & roles, CMDB, incidents, changes, catalog requests, SLAs
Connect Workspace ONE Intelligence — data from a configured WS1 Intelligence report
Connect Zabbix (Local Connector) — Zabbix server through the Harven Local Connector: monitored hosts and agent availability, interfaces and inventory, operational problems, users, roles and API tokens, actions, proxies, maintenance windows
Generic file & database imports
CSV Import — direct CSV, TSV or Excel upload, no auth required
JSON Import — direct JSON/NDJSON upload, no auth required
Need help? Contact [email protected].