From integration to automation.
Build any security vendor integration in 15 minutes instead of 2 weeks. Point Connector Forge at CrowdStrike, Splunk, Okta, ServiceNow — it reads the docs, picks the capabilities, ships the connector.
Free forever for your first integration. No credit card. No demo call.
Designed for the integrations security teams actually buy
Four steps. No vendor SDK to learn. No 2-week ticket.
Drop the vendor in
Type a vendor name. Connector Forge crawls their docs, sniffs for an OpenAPI spec, and extracts the API surface area in 30 seconds.
Pick the capabilities
Claude returns a structured list — list IOCs, push alerts, query graphs. Click which ones you want. Skip the noise.
Sandbox + review
Generated code passes an AST safety validator before any sandbox runs. You review a diff, see the test transcript, approve.
Deploy + audit
Signed manifest, tamper-evident bundle, full audit trail. Your runtime pulls the connector and starts working.
Built to pass an actual security review.
Every line of generated code goes through the same gates a hand-built integration would. The audit trail is the kind your auditor asks for.
AST safety validator
Generated code is scanned for subprocess, pickle, eval, dunder access, and off-allowlist URLs before any sandbox runs. The first security gate.
Three sandbox modes
Fixtures (no Docker, no creds), Docker (read-only, cap-drop=ALL, egress allowlist), and live against vendor sandboxes. Pick per integration.
HMAC-signed manifests
Every active connector ships a signed manifest with file-level SHA-256 hashes. Runtime verification catches tampering between deploy and load.
Versioned + diffable
Each generation is a new version. The review screen shows a unified diff against the previous one. Roll forward, roll back, audit who did what.
Multi-tenant from day one
Postgres row-level security on every table, hash-chained audit trail, per-tenant entitlements. Self-host or hosted; same isolation guarantees.
Bring your own LLM
Anthropic, Bedrock, Azure OpenAI, OpenAI — same interface. Route LLM spend through whichever vendor contract you already have.
Per-integration. Free tier is real.
Hand-built vendor integrations run $12,000-$30,000 in engineering hours. Indie is $49.
Free
For trying it out
- 1 active integration
- Community Discord support
- Watermarked output
- Hosted SaaS
Indie
For the engineer who actually needs to ship
- 10 active integrations
- No watermark
- Email support, 2 business days
- Hosted SaaS
Team
For a security automation team
- Unlimited integrations
- 5 seats
- Priority support, 1 business day
- SSO (SAML, Google, Microsoft)
- Audit log export
Enterprise
For your CISO and procurement
- Self-hosted option
- 99.9% uptime SLA
- Custom connector library
- Dedicated account manager
- BYO-KMS
LLM usage costs are passed through at cost + 20%. A typical mid-complexity vendor integration costs $1.50-$3.00 to generate.
The questions buyers always ask.
Is generated code production-safe?
Every generated file is parsed with Python AST and screened for forbidden imports (subprocess, pickle, ctypes), forbidden calls (exec, eval, os.system), and dunder access (the canonical sandbox-escape vectors). Blocking findings stop deploy. Then the connector runs in a sandbox before you see a green light. The same gates a hand-built connector would go through in code review.
What happens if a vendor changes their API?
Connector health endpoints surface schema mismatches as a specific error_kind. The integration page warns when health goes red. You re-run the generator against the updated docs, review the diff, deploy a new version. Old versions stay archived; rollback is one click.
Can I run this on-prem?
Yes, in the Enterprise tier. Docker Compose for small deploys, Helm + Terraform for AWS / Azure / GCP. Same code as the SaaS; your KMS, your audit log destinations, your IdP.
Which LLM does Connector Forge use?
Anthropic Claude by default. Bedrock, Azure OpenAI, and OpenAI adapters are in active build. Same interface; you pick the backend that fits your existing vendor contract.
How do you charge for LLM usage?
Pass-through cost plus 20%. A typical mid-complexity vendor (CrowdStrike, Splunk, ServiceNow) costs $1.50-$3.00 in LLM spend per end-to-end build. Sandbox runs are bundled up to 100/month/integration; $0.05/run after.
Will the integrations work outside Connector Forge?
Yes. Generated connectors are plain Python modules that implement a documented Connector interface. You can run them via the Connector Forge runtime, vendor them into your own platform, or wrap them in a CLI worker. Your subscription gives you the right to do all three.
Stop hand-rolling integrations.
Your first one is free. The second one takes you 15 minutes.