Integrations To Help Collect Evidence

Ensure continuous InfoSec compliance with automated integrations to collect evidence from tools you already know and use.

Integrations To Help Collect Evidence
Be Ready for Your Next Security Audit


Be Ready for Your Next Security Audit

Tugboat Logic integrations help you gather evidence to prove your security controls are in place. Prepare for an audit in minutes by leveraging our integrations for automatic evidence collection. New integration are added every month.


Automate continuous compliance for transparency and control

Leverage our Integrations for automatic evidence collection.

Automatically collect evidence so that your security controls are in place, continuously.

New integrations coming out every month...

Code Review

Evidence of code reviews for every production release.

Employee Account Authorization

Evidence of access authorization for new employees.

Employee Account Revocation

Evidence of account deactivation for terminated employees.

Employee Access Privilege Review

Evidence that management has completed use access review for all employees on a quarterly basis.

MFA on Applications

Evidence that MFA is enabled by application for enterprise applications in scope.

Cloud Firewall Rules

Evidence of firewall rules configuration for your cloud hosting environment(s).

Cloud IAM Configuration

Evidence of cloud hosting provider(s) users and permissions.

Cloud Data at Rest Encyption

Evidence that sensitive data is encrypted at rest in your cloud hosting data stores, and that it is not publicly facing the internet.

Vendor Risk Management

Evidence of security questionnaire and report evaluating the risk of all vendors.

Internal Audit

Evidence of control self assessment/internal audit.

Contract Commitments

Evidence for all customer contact commitments.

Security Awareness Training

Evidence that employee awareness training has been completed.

System Performance and Capacity Monitoring

Evidence that performance/availability logging is in place for you cloud environment(s).

System Event Logging

Evidence that system event logging is in place for your cloud environment(s).

Serverless Function Security

Evidence that Serverless Functions are configured securely.

Workstation Antivirus

Evidence that company workstations are running antivirus software.

Workstation Disk Encryption

Evidence that data is encrypted on company workstations.

Workstation Password Configuration

Evidence that company workstations require secure passwords.

Change Management

Evidence of change management procedures.

Cloud Multi-Factor Authentication

Evidence that company requires MFA for infrastructure access.

Cloud Password Configuration

Evidence that company requires secure passwords for access to cloud infrastructure.

Customer Support System

Evidence that customer support incidents are addressed in a timely manner.

Incident Management

Evidence that incidents are logged and addressed in accordance with your SLAs.

Penetration Testing

Evidence that company performs penetration tests on in-scope systems.

Employee Background Checks

Evidence of background checks for all new employees.

Risk Assessment

Evidence of your risk assessment, including risk identification, risk treatment, mitigating controls, and the implementation status of your mitigating controls.

Project Management

Send Controls and Evidence Tasks to Jira and automatically update their status in Tugboat Logic.


Get automated notifications and alerts directly to Slack.

Need Something Else? Build Your Own Integration.


Need Something Else? Build Your Own Integration.

If you can’t find the integration you need, use our Custom Evidence API to integrate with your vendor of choice. Our Custom Evidence API allows you to build your integrations into Tugboat Logic and automate collecting any piece of evidence for your InfoSec program.

Get Started

Custom Evidence API

Build Your Own Integration.

Configure our API to your vendor of choice

Choose evidence to collect

Add it to a specific evidence task


Monitor and Receive Alerts for All Your Integrations

All our built-in integrations include AutoVerify Alerts. This continuously monitors your automated evidence collection services and ensures you’re compliant at all times. If there’s ever an issue with your integration setup, you’ll be notified immediately about the problem, which evidence tasks it impacts and what you need to do to fix it.

Monitor and Receive Alerts for All Your Integrations
Make Screenshots Part of Your Streamlined Process


Make Screenshots Part of Your Streamlined Process

Even with the integrations available, there will still be times when you need to gather information manually. You can capture screenshots anywhere on the browser in a few clicks with the Tugboat Logic Extension for Chrome. You can save screenshots to the Tugboat Logic app or use them on another system to answer security questionnaires.

Request Demo

And More Coming Every Month

Check back frequently to see what additional AutoCollect Evidence use cases we’ve added!

Book Demo