In today's digital landscape, cybersecurity threats are constantly evolving, making it imperative for organizations to have robust cybersecurity schemes in place to protect their networks and data. For this reason, Lumu was designed to work alongside other solutions to make your cybersecurity stack much more than the sum of its parts, and the embodiment of that philosophy are our integrations. 

Lumu can be seamlessly integrated with a range of other solutions in the market for data collection, SecOps and response automation procedures to incorporate Continuous Compromise Assessment™ seamlessly into the organization's defense strategy. This article will delve into the key features and benefits of Lumu's integrations, our main integration categories and highlight the various integrations available, and how they make it easier for organizations to tailor their cybersecurity strategies to meet their specific needs. 

A truly proficient cybersecurity operation requires collecting information on the performance of the network's cybersecurity architecture, and using that information to improve the system continuously.

Key Benefits of Lumu Integrations

These are some of the main benefits your organization stands to gain from making use of Lumu's integrations. 

• Vendor-Agnostic Symbiosis: Get the most out of the technologies in your security stack by sending telemetry from your existing tools to Lumu for analysis using our available data collection integrations, then relay the resulting indicators of compromise (IoCs) back to your security stack for automated response through our response integrations. Lumu fills any potential gaps in your cybersecurity scheme by connecting the existing links with its Continuous Compromise AssessmentTM capabilities. 

• Defend First, Investigate Later: Mitigate threats faster than humanly possible and ensure that threat actors can’t take advantage when teams are off-duty. Enabling your solutions to carry out automated response procedures using confirmed compromise data will create faster response flows and times to protect your network. 

• Mitigate and Eradicate Compromises: Augment block lists with detected compromise instances, automatically alert key stakeholders in your organization when a confirmed compromise is found, and instantly respond to adversarial infrastructure trying to establish contact with your network.

Lumu offers out-of-the-box and custom integrations to send confirmed compromise instances to any third-party tool for automated mitigation and remediation; receive data from your defense solutions for analysis and Continuous Compromise AssessmentTM; and to relay information to specialized monitoring solutions for ticketing and case management (SecOps).

Lumu Integrations

Lumu Integrations are available to all subscription tiers; however, some limitations apply to Lumu Free and Lumu Insights customers. Lumu Defender customers can enjoy the full power of our integrations. To learn more, refer to the pricing section on our website and our offerings article. 

Use Cases

These are some of the most common use cases for Lumu's Out-of-the-box and Custom API integrations with a wide range of cybersecurity solutions. 

• Firewall and Preventive Controls: Automate response by configuring integrating Lumu's real-time analysis with firewalls and threat feed systems to block malicious contacts.
• SIEM & SOAR: The Defender API allows feeding Lumu Incidents to SIEMs for accelerating analysis and correlation, and SOARs solutions for triggering response playbooks.
• Endpoints: Set up the Defender API to feed compromised endpoints and users for containment and eradication.

Out-of-the-box - Integrations a Click Away

Lumu's Out-of-the-box integrations are a seamless and convenient way to integrate Lumu with other solutions in your cyberdefense stack to automate your data collection, SecOps and response processes, through the Lumu Portal only with a few clicks. 

This is our recommended way to integrate other solutions in your security stack with Lumu. Our Out-of-the-box App Integrations are simple, straightforward and tailored to the needs of our customers. 

You can find a list of Integration Apps available for easy configuration directly from the Lumu Portal. They are divided into categories, such as Response, Data Collection and SecOps Integrations.

Out-of-the-box Integrations

Our Out-of-the-box Apps integrations catalog is always growing to provide you with better monitoring and response capabilities. To learn more about our available integrations, please refer to the Out-of-the-box Integrations article in our documentation, where you can find more detailed information.

Custom - Lumu Defender API Integrations

For scenarios where you have specific requirements that are not yet available through the preconfigured out-of-the-box integrations, you have the possibility to set up integrations via API to connect Lumu in the way that best suits your needs. The Defender API settings are available from the Lumu Portal and allows endless possibilities of integrating with blocking lists, firewalls, SIEMs and far more.