Pharova
Integrations

42 products, connected in minutes

Pharova works with the tools you already own. Each product has a guided setup card that lists exactly what to create and which permissions to grant, tests the connection before anything is turned on, and keeps checking it afterwards.

SIEM

7
  • Microsoft Sentinel
  • Splunk Enterprise and Cloud
  • IBM QRadar
  • LogRhythm
  • Exabeam
  • Elastic Security
  • OpenSearch

XDR and EDR

6
  • Microsoft Defender XDR
  • CrowdStrike Falcon Insight
  • Palo Alto Cortex XDR
  • Trend Vision One
  • Trend Micro Apex One
  • Sophos Central

Network detection

4
  • ExtraHop RevealX
  • Corelight
  • OpenText NDR
  • Vectra AI

Firewalls and WAF

3
  • Fortinet FortiGate
  • Palo Alto NGFW and Panorama
  • F5 Advanced WAF

Identity and access

5
  • Microsoft Entra ID
  • Defender for Identity
  • Active Directory (on-site)
  • Okta
  • CyberArk Privileged Access Manager

Email, chat, service desk

4
  • Microsoft 365
  • Microsoft Teams
  • ServiceNow
  • Jira Service Management

Threat intelligence

13
  • Google Threat Intelligence (VirusTotal)
  • Mandiant
  • CrowdStrike Falcon Intelligence
  • Recorded Future
  • IBM X-Force
  • AlienVault OTX
  • abuse.ch
  • AbuseIPDB
  • MISP
  • OpenCTI
  • GreyNoise
  • CISA KEV
  • Shodan

Reading and acting are separate

Every action has its own switch, off until you turn it on. Secrets are stored encrypted and never shown again.

Broken connections flagged

A connection that stops working shows on the Overview and your admins get an email. The warning clears itself when the connection is fixed.

Threat intelligence, combined

Every source you connect is asked, plus your own Sentinel threat intelligence. The worst verdict wins.

Microsoft government clouds

GCC and GCC High are supported on the Microsoft cards.

Pharova Connector

Reach on-site tools without opening a single inbound port

The Pharova Connector is a small program that runs inside your network. It connects out to Pharova over HTTPS, does the work for tools only your network can reach, such as Active Directory or an on-site SIEM, firewall or password vault, and reports back.

  • Outbound only. HTTPS on port 443, nothing inbound from the internet.
  • Two per site, both active. If one goes quiet, the other takes over.
  • Passwords Pharova cannot read. On-site credentials are readable only by your connectors.
  • Simple install. Linux with Docker, Windows Server, or a ready-made virtual machine.
ItemDetail
Machine2 CPUs, 4 GB memory, 40 GB disk, for each of two
SystemsUbuntu 22.04 / 24.04, Red Hat Enterprise Linux 8 / 9, Windows Server 2019 to 2025, or a VM for VMware, Hyper-V or Azure
NetworkOutbound HTTPS 443, LDAP or LDAPS to a domain controller
ScaleTested at 50,000 directory users

See Pharova on your own alerts

We connect to a copy of your tools in a guided session and show you every decision, with the evidence behind it.