42 products, connected in minutes
Pharova works with the tools you already own. Each product has a guided setup card that lists exactly what to create and which permissions to grant, tests the connection before anything is turned on, and keeps checking it afterwards.
SIEM
7- Microsoft Sentinel
- Splunk Enterprise and Cloud
- IBM QRadar
- LogRhythm
- Exabeam
- Elastic Security
- OpenSearch
XDR and EDR
6- Microsoft Defender XDR
- CrowdStrike Falcon Insight
- Palo Alto Cortex XDR
- Trend Vision One
- Trend Micro Apex One
- Sophos Central
Network detection
4- ExtraHop RevealX
- Corelight
- OpenText NDR
- Vectra AI
Firewalls and WAF
3- Fortinet FortiGate
- Palo Alto NGFW and Panorama
- F5 Advanced WAF
Identity and access
5- Microsoft Entra ID
- Defender for Identity
- Active Directory (on-site)
- Okta
- CyberArk Privileged Access Manager
Email, chat, service desk
4- Microsoft 365
- Microsoft Teams
- ServiceNow
- Jira Service Management
Threat intelligence
13- Google Threat Intelligence (VirusTotal)
- Mandiant
- CrowdStrike Falcon Intelligence
- Recorded Future
- IBM X-Force
- AlienVault OTX
- abuse.ch
- AbuseIPDB
- MISP
- OpenCTI
- GreyNoise
- CISA KEV
- Shodan
Reading and acting are separate
Every action has its own switch, off until you turn it on. Secrets are stored encrypted and never shown again.
Broken connections flagged
A connection that stops working shows on the Overview and your admins get an email. The warning clears itself when the connection is fixed.
Threat intelligence, combined
Every source you connect is asked, plus your own Sentinel threat intelligence. The worst verdict wins.
Microsoft government clouds
GCC and GCC High are supported on the Microsoft cards.
Reach on-site tools without opening a single inbound port
The Pharova Connector is a small program that runs inside your network. It connects out to Pharova over HTTPS, does the work for tools only your network can reach, such as Active Directory or an on-site SIEM, firewall or password vault, and reports back.
- Outbound only. HTTPS on port 443, nothing inbound from the internet.
- Two per site, both active. If one goes quiet, the other takes over.
- Passwords Pharova cannot read. On-site credentials are readable only by your connectors.
- Simple install. Linux with Docker, Windows Server, or a ready-made virtual machine.
| Item | Detail |
|---|---|
| Machine | 2 CPUs, 4 GB memory, 40 GB disk, for each of two |
| Systems | Ubuntu 22.04 / 24.04, Red Hat Enterprise Linux 8 / 9, Windows Server 2019 to 2025, or a VM for VMware, Hyper-V or Azure |
| Network | Outbound HTTPS 443, LDAP or LDAPS to a domain controller |
| Scale | Tested at 50,000 directory users |
See Pharova on your own alerts
We connect to a copy of your tools in a guided session and show you every decision, with the evidence behind it.