With over 100 integrations and capabilities spanning five major categories of security outcomes, Cisco XDR offers an incredibly powerful ecosystem for users, partners, and prospective customers. But with so many tools, workflows, and data sources available, finding the right integration or automation can feel overwhelming. That’s why we’re excited to introduce Cisco XDR Connect—a new tool designed to make navigating this rich ecosystem easier than ever. With a clean, intuitive interface and no Cisco XDR login required, XDR Connect lets users search, browse, and explore integrations and automation capabilities all in one place.
More than just a catalog, Cisco XDR Connect is a window into the breadth and depth of Cisco XDR’s interoperability. An XDR is only as effective as the event data and controls it can access, and Cisco has prioritized open architectures and data standards to ensure maximum flexibility. This openness empowers integration partners, software vendors, and even customers to build and share their own integrations, driving a vibrant and growing ecosystem around Cisco XDR.
The result is an expansive network of participating technologies and shared knowledge, enabling everything from log ingestion and threat hunting to automated response actions and enriched threat intelligence. With so many possibilities—and a robust library of SOAR-like workflows—the need for a simple, centralized tool to discover and evaluate these options became clear.

Cisco XDR Connect fills that need, providing a streamlined way to explore what’s possible with Cisco XDR. Whether you’re looking to enhance visibility, improve investigation workflows, or automate threat response, XDR Connect helps you find the right tools to do it—quickly and confidently.
In Cisco XDR Connect, users can search, browse, and view the details of all available XDR integrations and automation content. The information shown about each integration includes its capabilities and the steps and details that will be required to install and configure the integration. For automation content, the information includes details about what automation accomplished and the integration it’s compatible with. Users with a Cisco XDR login can also easily pivot into XDR to install the content they’re viewing.
For example, when searching for Cisco Secure Endpoint, you’ll see one comprehensive page showing information about the Secure Endpoint integration and 12 installable workflows, four built-in workflows, and 14 built-in actions that are related. There’s also a global search that allows you to look for content regardless of the content type, making it even easier to find what you’re looking for and discover what Cisco XDR can offer.


What we’ve delivered today with Cisco XDR Connect is just the beginning.
Plans for XDR Connect in the future include more tools to assist in the creation of Community integrations and automations, and an even more tightly knit experience within Cisco XDR itself.
Stay tuned to XDR Connect and these blogs for more announcements as this tool continues to evolve and grow, in response to our users, integration partners, and Cisco XDR developer community.
We’d love to hear what you think! Ask a question and stay connected with Cisco Security on social media.
Cisco Security Social Media
Share: