Which tools does SuperClue integrate with?
SuperClue sends findings to Jira and GitHub Issues, alerts to Slack, Microsoft Teams and custom webhooks, and security events to your SIEM over syslog, CEF or Splunk HEC. It also gives you API keys and ready-made snippets to scan from GitHub Actions and GitLab CI.
What can I connect?
| Type | Supported |
|---|---|
| Issue trackers | Jira, GitHub Issues |
| Chat and webhooks | Slack, Microsoft Teams, custom JSON webhook |
| SIEM export | Syslog (RFC 5424) or CEF over UDP, TCP or TLS; Splunk HEC or generic JSON over HTTPS |
| CI/CD | Snippets for GitHub Actions and GitLab CI |
| REST API | API keys for your own scripts and pipelines |
How do findings reach my issue tracker?
Connect Jira with your site URL, email, API token and project, or connect GitHub Issues. You can then turn a scan finding into a ticket with its severity and remediation advice. Each ticket costs 1.90 credits.
What can I send to my SIEM?
- Formats: syslog RFC 5424 or CEF over UDP, TCP or TLS, or HTTPS to Splunk HEC or a generic JSON endpoint.
- Event types: SOC events, HIDS alerts, incidents and active response actions.
- Delivery is at least once, so your SIEM may occasionally receive a duplicate.
There is no native connector for Microsoft Sentinel, QRadar or Elastic. Use syslog, CEF or the JSON webhook, which those products can ingest.
What does the CI/CD scan run?
You call the CI/CD scan endpoint with an API key. SuperClue provides copy-paste snippets for GitHub Actions and GitLab CI. Other CI systems can call the same endpoint with any HTTP client. Each CI/CD scan costs 9.52 credits.
- A code scan runs basic SAST: the 10 regex rule groups described on the code security page.
- A URL scan runs a quick header check: 6 security headers, the Server banner, HTTPS and the TRACE method.
A CI/CD scan does not run the 350-module website scanner. Use a full website scan or AI code review for deeper coverage.
Which export formats are there?
Scan reports export as PDF, JSON, CSV, TXT, XML or HTML. AI code review findings export as SARIF.
Create an API key and connect your first tool.
Request access