Amazon Bedrock
Amazon Web Services
Generative AI platform
Applications & WorkloadsDataIdentity
Documented API3 ZTMM functions
Integrations
Your tools already hold the proof.
ZTASphere v1.1 ships with 17 security tool integrations that together cover 32 of the 40 ZTMM 2.0 functions. Each one is read-only and documents exactly which evidence satisfies which maturity stage.
17Tool integrations in v1.1
32 / 40ZTMM functions covered
6Pillars and capabilities informed
Readonly roles for every integration
Showing 18 sources
Armis Centrix
Armis
Asset intelligence (IT, IoT, OT, medical)
DevicesNetworks
Documented API3 ZTMM functions
Autonomous Digital Experience Management (ADEM)
Palo Alto Networks
Digital experience monitoring
NetworksApplications & Workloads
Validated in pilot2 ZTMM functions
Axonius
Axonius
Cyber asset attack surface management (CAASM)
DevicesIdentityCross-cutting
Validated in pilot5 ZTMM functions
Cisco AI Defense
Cisco
AI application and model security
Applications & WorkloadsData
Validated in pilot3 ZTMM functions
Cortex XDR
Palo Alto Networks
Extended detection and response
DevicesCross-cutting
Documented API3 ZTMM functions
Elastic Security (SIEM)
Elastic
SIEM and log analytics
Cross-cuttingIdentityDevicesNetworksApplications & Workloads
Documented API5 ZTMM functions
Forescout eyeSight / eyeControl
Forescout
Network access control and device visibility
DevicesNetworks
Documented API4 ZTMM functions
JetStream Security (AI agent governance)
JetStream Security
AI agent governance and runtime oversight
Applications & WorkloadsIdentityData
Validated in pilot6 ZTMM functions
Microsoft Entra ID
Microsoft
Identity provider
IdentityDevices
Documented API4 ZTMM functions
OpenText Data Encryption (Voltage SecureData)
OpenText
Data encryption and tokenization
DataNetworks
Validated in pilot2 ZTMM functions
Palo Alto Networks NGFW (PAN-OS)
Palo Alto Networks
Next-generation firewall
NetworksApplications & WorkloadsData
Documented API4 ZTMM functions
Prisma AIRS (AI Runtime Security)
Palo Alto Networks
AI application and model security
Applications & WorkloadsData
Documented API3 ZTMM functions
Prisma Access
Palo Alto Networks
Secure access service edge (SASE / ZTNA)
NetworksIdentityDevicesApplications & Workloads
Documented API5 ZTMM functions
Prisma Cloud (CSPM / CNAPP)
Palo Alto Networks
Cloud-native application protection
Applications & WorkloadsDataNetworksCross-cutting
Documented API4 ZTMM functions
SAEGIS Data Governance
SAEGIS
Data governance (NIST CSF 2.0, IPDRR)
DataCross-cutting
Validated in pilot6 ZTMM functions
ZTASphere encryption-in-transit probe
ZTASphere (built in)
Transport encryption verification
NetworksData
Verified2 ZTMM functions
Your own source
Collector API
Bring internal tools and existing evidence through the documented REST API and collector model.
Any pillar
Documented API means the integration is built against the vendor's published API. Validated in pilot means the API contract is confirmed with your tenant during the pilot. Vendor names identify compatible products and do not imply partnership or endorsement.
How integrations work
Read-only, scoped and measured against each stage.
Least privilege
Each integration uses a dedicated read-only service account with the narrowest scope the vendor API allows. Outbound calls can be pinned to an egress proxy with a domain allowlist.
Evidence per stage
Every integration spells out which query result satisfies Traditional, Initial, Advanced and Optimal for each function it informs, so the score is explainable.
Health watched
Each source reports live, late, down or blocked. Silence raises an alarm and a ticket instead of quietly lowering your score.
Ticketing and workflow
Alerts and actions flow to ServiceNow, Jira, the built-in queue, or any system that accepts a signed webhook.
Bring your own source
A documented REST API and collector model let you add internal tools or evidence your team already gathers.
Don't see your tool?
Tell us what you run. Most environments are covered by the identity, endpoint, network and SIEM integrations, and new sources are added through the collector API.