---
title: Ingest third-party cloud security data
description: This section describes how to ingest cloud security data from third-party tools into Elasticsearch. Once ingested, this data can provide additional context...
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/ingest-third-party-cloud-security-data
products:
  - Elastic Cloud Serverless
  - Elastic Security
---

# Ingest third-party cloud security data
This section describes how to ingest cloud security data from third-party tools into Elasticsearch. Once ingested, this data can provide additional context and enrich your Elastic Security workflows.
You can ingest both third-party cloud workload protection data and third-party security posture and vulnerability data.

## Ingest third-party workload protection data

You can ingest third-party cloud security alerts into Elastic Security to view them on the [Alerts page](/elastic/docs-content/pull/4236/solutions/security/advanced-entity-analytics/view-analyze-risk-score-data#alerts-page) and incorporate them into your triage and threat hunting workflows.
- Learn to [ingest alerts from Sysdig Falco](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/cncf-falco).


## Ingest third-party security posture and vulnerability data

You can ingest third-party data into Elastic Security to review and investigate it alongside data collected by Elastic Security's native cloud security integrations. Once ingested, cloud security posture and vulnerability data appears on the [**Findings**](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/findings-page) page and in the [entity details](/elastic/docs-content/pull/4236/solutions/security/advanced-entity-analytics/view-entity-details#entity-details-flyout) and [alert details](/elastic/docs-content/pull/4236/solutions/security/detect-and-alert/view-detection-alert-details#insights-section) flyouts.
<note>
  Data from third-party integrations does not appear on the [CNVM dashboard](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/cnvm-dashboard) or the [Cloud Posture dashboard](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/dashboards/cloud-security-posture-dashboard),
</note>

Data from each of the following integrations can feed into at least some of these workflows:
- [AWS Config](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/aws-config)
- [AWS Inspector](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/aws-inspector)
- [AWS Security Hub](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/aws-security-hub)
- [Google Security Command Center](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/google-security-command-center)
- [Microsoft Defender for Cloud](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/microsoft-defender-for-cloud)
- [Microsoft Defender for Endpoint](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/microsoft-defender-for-endpoint)
- [Microsoft Defender XDR](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/microsoft-defender-xdr)
- [Qualys VMDR](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/qualys)
- [Rapid7 InsightVM](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/rapid7)
- [Tenable VM](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/tenablevm)
- [Wiz](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/cloud/integrations/wiz)