Integrations
Integrations connect BestDefense to the tools you already use — your version control, your issue tracker, your code-quality scanner, and your identity provider. You manage them all from one place: go to Integrations in the app.
Each tool shows up as a card with its current status and the actions you can take:
- Connected — the integration is set up and working.
- Not connected — available to connect.
- Coming soon — on the roadmap, not yet available.
Configured per organization
Section titled “Configured per organization”Integrations belong to the organization, not to your personal account. Each organization has its own connections, so connecting a tool in one organization doesn’t affect any other. If you work across multiple organizations, set up the integrations you need in each one. Switch organizations from the menu in the top bar before you connect.
What you can connect
Section titled “What you can connect”| Integration | What it’s for |
|---|---|
| Version control | Lets BestDefense open pull requests for AI remediation and track their status in the Remediation Queue. Supports GitHub, GitLab, and Bitbucket — availability varies by provider. |
| Jira | Create Jira issues from findings (one at a time or in bulk) and from code-quality issues, and link merged fixes back to their ticket. |
| SonarQube | Bring SonarQube results into BestDefense to power the Code Quality product. |
| Single sign-on (SSO) | Let your members sign in through your own identity provider (for example, Microsoft Entra ID) using OIDC. |
Automate with the API
Section titled “Automate with the API”Beyond the connect-a-tool integrations above, BestDefense has a REST API you can drive from scripts and pipelines — trigger scans, poll results, open remediation pull requests, and gate releases on findings.
- API access & tokens — authenticate and create a token.
- CI/CD automation — a worked pipeline that fails the build on high-severity findings.
Where to go next
Section titled “Where to go next”- Set up remediation pull requests: Version control.
- Hand findings to your tracker: Jira.
- See code-quality results in BestDefense: SonarQube.
- Centralize sign-in for your team: Single sign-on (SSO).
- Automate from your pipeline: CI/CD automation.