> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tier4ai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Introduction to Integrations

> Connect your security stack to enable automated detection and response

Tier4 connects to your existing security tools to provide automated threat detection, investigation, and response. Our integrations are designed to work together; combining detection sources with user and host information, ticketing systems, and communication platforms to enable a fully automated MDR experience.

<Tip>
  Just starting with Tier4? Start by connecting your first [security tool](#detection-sources) and witness our automation in action.
</Tip>

## How Integrations Work

1. Ingest Alerts - Tier4 automatically retrieves alerts from your security tools via API
2. Enriches and Triages - Each alert is automatically enriched with third-party threat intelligence, aggregated with historical alerts, analyzed by specialized agents, and decisioned by our AI Analyst
3. Takes Response Action - Based on your environment configurations, Tier4 can autonomously take response actions to contain threats immediately

<Info>
  Tier4 requests only necessary permissions and connects to tools using secure OAuth or API tokens. We never store credentials in plain text.
</Info>

## Source System Updating

When an alert is decisioned in the platform, Tier4 will send both verdict and status updates back to the source system via API. This source system updating allows your source systems to stay in sync with the Tier4 platform at all times.

## Detection Sources

<Columns cols={3}>
  <Column>
    <Card title="Crowdstrike" icon="bird" href="/crowdstrike">
      Endpoint Detection Platform
    </Card>
  </Column>

  <Column>
    <Card title="SentinelOne" icon="shield" href="/sentinelone">
      Endpoint Detection Platform
    </Card>
  </Column>

  <Column>
    <Card title="Microsoft" icon="shield-check" href="/microsoft">
      Defender for Endpoint, Entra ID, and more
    </Card>
  </Column>
</Columns>

<Columns cols={3}>
  <Column>
    <Card title="Watchguard" icon="magnifying-glass-chart" href="/watchguard">
      Endpoint Detection Platform
    </Card>
  </Column>

  <Column>
    <Card title="TrendAI" icon="sparkles" href="/trendai">
      Endpoint Detection Platform
    </Card>
  </Column>

  <Column>
    <Card title="ArcticWolf Aurora" icon="wolf-pack-battalion" href="/aurora">
      Endpoint Detection Platform
    </Card>
  </Column>
</Columns>

<Columns cols={3}>
  <Column>
    <Card title="Sublime Security" icon="eye" href="/sublime">
      Email Security Platform
    </Card>
  </Column>

  <Column>
    <Card title="Mimecast" icon="mail-bulk" href="/mimecast">
      Email Security Platform
    </Card>
  </Column>

  <Column />
</Columns>