name: Varonis description: Varonis is a pioneer in data security and analytics, specializing in software for data security, governance, threat detection and response. The company provides solutions for protecting enterprise data across cloud and on-premises environments including data classification, access governance, behavioral threat detection, and automated remediation. image: https://www.varonis.com/favicon.ico url: https://www.varonis.com created: '2025' modified: '2026-05-03' tags: - Cloud Security - Compliance - Data Analytics - Data Governance - Data Security - Threat Detection apis: - name: Varonis DatAlert API description: >- API for accessing threat detection and incident response capabilities from Varonis DatAlert. Provides endpoints for retrieving alerts, managing alert status, adding notes to alerts, and accessing alerted events for investigation and threat hunting. The DatAlert API enables integration with SIEM and SOAR platforms for centralized security operations. image: https://www.varonis.com/favicon.ico humanURL: https://www.varonis.com/products/datalert baseURL: https://api.varonis.com/datalert tags: - Incident Response - Security Alerts - Threat Detection properties: - type: Documentation url: https://docs.varonis.com/api/datalert - type: OpenAPI url: openapi/varonis-datalert-openapi.yml - type: Authentication url: https://docs.varonis.com/api/authentication - type: JSONSchema url: json-schema/varonis-datalert-alert-schema.json title: Alert Schema - type: JSONSchema url: json-schema/varonis-datalert-alerted-event-schema.json title: Alerted Event Schema - type: JSONSchema url: json-schema/varonis-datalert-threat-model-schema.json title: Threat Model Schema - type: JSONStructure url: json-structure/varonis-datalert-alert-structure.json title: Alert Structure - type: JSONStructure url: json-structure/varonis-datalert-alerted-event-structure.json title: Alerted Event Structure - type: Example url: examples/varonis-datalert-alert-example.json title: Alert Example - type: Example url: examples/varonis-datalert-alerted-event-example.json title: Alerted Event Example - name: Varonis Data Security Platform API description: >- API for integrating with Varonis Data Security Platform to manage data security policies, access permissions, and threat detection. image: https://www.varonis.com/favicon.ico humanURL: https://www.varonis.com/products/data-security-platform baseURL: https://api.varonis.com tags: - Access Control - Data Security - Permissions properties: - type: Documentation url: https://docs.varonis.com/api - type: Authentication url: https://docs.varonis.com/api/authentication - name: Varonis DataPrivilege API description: >- REST and SOAP API for integrating Varonis DataPrivilege with IAM and ITSM solutions. Enables synchronization of managed data, execution and reporting on access requests and access control changes, and automation of entitlement reviews and self-service access workflows. image: https://www.varonis.com/favicon.ico humanURL: https://www.varonis.com/products/dataprivilege baseURL: https://api.varonis.com tags: - Access Governance - Entitlement Reviews - Identity Management - Self-Service Access properties: - type: Documentation url: https://www.varonis.com/blog/introducing-gdpr-patterns-and-dataprivilege-api - name: Varonis MCP Server description: >- Model Context Protocol server that interfaces with Varonis APIs, allowing AI clients such as ChatGPT, Claude, and GitHub Copilot to access and orchestrate the Varonis Data Security Platform using natural language. Enables complex workflows including alert retrieval, access remediation, and compliance reporting. image: https://www.varonis.com/favicon.ico humanURL: https://www.varonis.com/blog/mcp-server baseURL: https://api.varonis.com tags: - AI Integration - Automation - MCP - Natural Language properties: - type: Documentation url: https://www.varonis.com/blog/mcp-server - type: SDK url: https://www.npmjs.com/package/@varonis/mcp title: MCP Server npm Package maintainers: - FN: Kin Lane email: kin@apievangelist.com url: https://apievangelist.com include: - name: Varonis Support Portal url: https://support.varonis.com common: - type: Portal url: https://www.varonis.com/developers - type: Website url: https://www.varonis.com - type: Support url: https://www.varonis.com/resources/support - type: Blog url: https://www.varonis.com/blog - type: PrivacyPolicy url: https://www.varonis.com/trust/privacy - type: TermsOfService url: https://www.varonis.com/terms - type: StatusPage url: https://status.varonis.com - type: ChangeLog url: https://www.varonis.com/platform/changelog - type: Security url: https://www.varonis.com/trust/security - type: Login url: https://my.varonis.io/ - type: SignUp url: https://help.varonis.com/s/article/WDOC-2305 - type: HelpCenter url: https://help.varonis.com/s/ - type: TrustCenter url: https://www.varonis.com/trust - type: Integrations url: https://www.varonis.com/security-ecosystem-integrations - type: Training url: https://www.varonis.com/product-training - type: ContentLibrary url: https://www.varonis.com/resources - type: GitHubOrganization url: https://github.com/varonis - type: PartnerPortal url: https://partners.varonis.com/ - type: SpectralRules url: rules/varonis-spectral-rules.yml - type: NaftikoCapability url: capabilities/threat-detection-response.yaml title: Threat Detection and Response - type: Vocabulary url: vocabulary/varonis-vocabulary.yaml - type: JSON-LD url: json-ld/varonis-datalert-context.jsonld - type: Features data: - name: Behavioral Threat Detection description: AI-powered detection of abnormal user and data access behavior using DatAlert threat models aligned to MITRE ATT&CK. - name: Data Classification description: Automated sensitive data discovery and classification across cloud and on-premises data stores. - name: Access Governance description: DataPrivilege workflow automation for entitlement reviews, access requests, and permission remediation. - name: Forensic Investigation description: Detailed event-level forensics including file access, permission changes, and login activity for incident investigation. - name: SIEM and SOAR Integration description: REST API integration with SIEM platforms (Splunk, QRadar, Sentinel) and SOAR platforms (XSOAR, Phantom) for automated response. - name: AI-Assisted Security (MCP) description: Model Context Protocol server enabling natural language security operations with Claude, ChatGPT, and GitHub Copilot. - name: Compliance Reporting description: Built-in reporting for GDPR, HIPAA, PCI-DSS, SOX, and other compliance frameworks. - name: Cloud Security Posture description: Data security posture management for Microsoft 365, AWS, Azure, and Google Cloud environments. - type: UseCases data: - name: Insider Threat Detection description: Detect and respond to abnormal access patterns that indicate potential insider threats or compromised accounts. - name: Ransomware Detection description: Identify ransomware activity through mass file access, renaming, and encryption patterns. - name: Data Breach Investigation description: Investigate potential data breaches using forensic event trails to determine scope and blast radius. - name: Privileged Access Review description: Automate periodic entitlement reviews to ensure least-privilege access to sensitive data. - name: Compliance Audit description: Generate audit-ready reports demonstrating data access controls for regulatory frameworks. - name: SOAR Automation description: Integrate alert triage and remediation into automated playbooks via the DatAlert REST API. - name: AI-Driven Security Operations description: Use the Varonis MCP Server to enable AI assistants to query alerts, investigate events, and execute remediation. - type: Integrations data: - name: Microsoft Sentinel description: Ingest Varonis alerts and events into Microsoft Sentinel for correlation and automated response. - name: Splunk description: Stream DatAlert events to Splunk via the official Varonis App for Splunk SIEM integration. - name: IBM QRadar description: Forward Varonis DatAlert events to QRadar using the official integration guide. - name: CrowdStrike Falcon description: Enrich endpoint threat data with Varonis user and data access context. - name: ServiceNow description: Create and manage security incident tickets in ServiceNow from Varonis alerts. - name: Palo Alto XSOAR description: Automate alert triage and remediation workflows using the Varonis XSOAR integration. - name: Microsoft 365 description: Monitor and protect SharePoint, OneDrive, Exchange, and Teams data natively. - name: AWS description: Data security posture management for S3, RDS, and other AWS data services.