Anvilogic

Anvilogic is an agentic security operations platform. This connector brings Anvilogic's tools into your AI client, so analysts can work with their detection content, alerts, and investigations without switching context.

Once connected, you can:

• Search and inspect detection content, including Threat Identifiers, Threat Scenarios, and macros
• Author new detections and multi-stage threat scenarios
• Search and triage alerts, and analyze an event to get a verdict with findings and MITRE ATT&CK mapping
• Create and manage cases, attach events, and read the incident analyzer summary
• Create, deploy, and tune allowlist entries to reduce noise
• Run saved Blueprint workflows end to end and follow their progress

Authentication uses OAuth against your existing Anvilogic credentials, including SSO and MFA where your organization uses them. The connection runs as you rather than as a shared service account, so there is no service account to provision and no API key to issue or rotate. Access is confined to your own organization's data.

Tools that change deployed detection or suppression behavior are annotated so your client can prompt before they run, and administrators can restrict which tools are available.

An active Anvilogic subscription is required.