Integrations
What Hal connects to
Hal fuses two kinds of data into one reasoning surface: the events — your clients’ logs — and the context — your own MSP systems. Events without context are noise; context without events is a static inventory. Hal reads both, so an alert arrives as a conclusion, not a question.
Log sources — the events
- Microsoft 365 — unified audit log, directory, risk detections
- Google Workspace — admin reports, login and security events
- Sign-in & audit feeds — what Hal ingests per tenant
- Windows endpoints and network devices via a lightweight log shipper
Context — your MSP systems
- NinjaOne — RMM: managed endpoints, warranty, last-seen
- ConnectWise Manage — PSA: tickets, boards, SLA, client records
- Hudu — IT documentation, runbooks, network maps, vaulted secrets
- IT Glue — IT documentation, flexible assets, configurations
- Meraki — network topology, WAN IPs, site-to-site VPN peers
For technical onboarding, see Getting Started.