Alerts & investigations
Pull active findings, dig into an investigation, or summarize what happened on a shift.
Query your security operations data from inside Claude
Ask about alerts, investigations, audit logs, and configuration in plain language, and get answers grounded in your Exaforce data, without leaving the conversation.
A direct line from Claude to your security context
Audit logs
Trace who accessed what, when, and from where across your cloud and SaaS estate.
Configuration
Check policies, roles, and settings, like which Okta policies apply to a group.
4つの簡単なステップで接続
APIトークンを生成する
Exaforce コンソールで「Edit User Profile」を開き、「Generate API Token」をクリックします。有効期限とロールを設定し、生成されたトークンをコピーします。
MCPサーバーを追加する
テナントの /mcp/ エンドポイントを Claude に設定し、X-EXF-API-TOKEN ヘッダーにトークンを指定します。claude_desktop_config.json に1エントリを追加するか、Claude Code で1コマンド実行するだけで完了します。
再起動して確認する
Claude Desktop を再起動します（または Claude Code のセッションを読み込み直します）。exabot_search ツールが自動的に表示され、すぐに呼び出せる状態になります。
質問を始める
自然な言葉で質問を入力します。Claude がその質問を Exabot Search に渡し、統合された回答をその場で表示します。特別な構文は必要ありません。
The power of Claude, with the context of Exaforce.
Built for existing Exaforce customers
If your team already runs Exaforce, the connector turns any Claude session into a front door to your security data, no new dashboards to learn. Best for SOC analysts, detection & response engineers, and on-call responders who live in Claude and want answers grounded in their own environment.
Exabot in Claude Code
Investigate straight from the terminal while you work. Ask in plain language, Claude calls exabot_search and returns grounded results.
Exabot in Claude Desktop
SIEM query languages take months to learn and produce brittle queries that break when schemas change. Build powerful queries using natural language and/or simple dropdowns. Query Builder lets you combine behavioral events and configuration context (identity, permissions, SaaS settings, cloud resources, etc.) into a single query so you can correlate “what changed” with “what happened”.
Your data stays in your tenant
The connector is a query path, not a copy. Claude sends your question to your Exaforce tenant; Exabot Search runs against your connected sources and returns a synthesized answer. Access is always scoped to your token's roles.
Questions or trouble connecting?
The connector is available to existing Exaforce customers. Reach our team for setup help or to enable it for your tenant.
support@exaforce.com にメール