Integracje
Konektory open source: Wasze narzędzia open source dostarczają dowody
NetBox, Greenbone, Wazuh i wiele innych: bez opłat licencyjnych za narzędzie, bezpośrednio połączone z Waszą zgodnością.
From the tool straight into your evidence
Your inventory or scanner already knows the current state. With a connector, nobody has to copy it into a spreadsheet by hand.
With export, Excel and email
- Someone exports a list and sends it round.
- The spreadsheet shows the state on the day of the export.
- Nothing says where a value came from.
Statement in an audit, inventory example“The Excel file is from March.”
With a connector
- Complass syncs on a schedule, without an export.
- Every change is in the history, with its origin.
- By default, a person reviews new devices first. Nothing is deleted without one.
Statement in an audit, inventory example“Inventory from NetBox, last sync yesterday at 03:12, 4 changes.”
The tools Complass connects
Each row says what works today and what does not.
| Tool and licence | What Complass takes over | Droga | Status and limits |
|---|---|---|---|
| Inwentarz | |||
| NetBoxApache-2.0 | Devices and, if you wish, virtual machines become assets, with their MAC addresses. | Direct | DostępneDroga: Direct Tested in the lab with the original software Server publicly reachable over HTTPS, or through the relay from your network. MAC addresses come through the direct connection, not yet through the relay. |
| Snipe-ITAGPL-3.0 | Hardware from your register. Assigned people and purchase data stay out. | Direct | DostępneDroga: Direct Tested in the lab with the original software Server publicly reachable over HTTPS, or through the relay from your network. |
| GLPIGPL-3.0 | Computers, network equipment, printers and phones; for computers with the operating system and, if you wish, the installed software. | Direct | W przygotowaniuDroga: Direct Tested in the lab with the original software The server must be publicly reachable; there is no relay yet. No GLPI tickets. |
| Vulnerabilities and hardening | |||
| Greenbone Community EditionAGPL-3.0, GPL-2.0 | Findings of the newest reports of selected scan tasks, plus scan age and coverage as evidence. | Relay | BetaDroga: Relay Tested in the lab with the original software Scan output and solution texts are not transferred. |
| WazuhGPL-2.0, AGPL-3.0 | Hardening checks (SCA) per agent and vulnerabilities from Wazuh 4.8. | Relay | BetaDroga: Relay Tested in the lab with the original software No alerts or detections. Agents do not become assets. |
| Dependency-TrackApache-2.0 | Vulnerabilities in the components of your software and products. | Relay | BetaDroga: Relay Tested in the lab with the original software You assign each project to an asset once. Suppressed findings are not transferred. |
| Tożsamości | |||
| KeycloakApache-2.0 | Users, privileged roles, second factor and last sign-in for access reviews. | Direct | BetaDroga: Direct Tested in the lab with the original software The server must be publicly reachable. A purely internal Keycloak cannot be connected yet. |
| Tickets and chat | |||
| ZammadAGPL-3.0 | Tasks and, if you wish, incidents become tickets; status and internal notes come back. | Direct | DostępneDroga: Direct Tested in the lab with the original software The server must be publicly reachable. |
| MattermostTeam Edition: MIT | Notices from Complass in the channels of your own server. | Direct | DostępneDroga: Direct Tested in the lab with the original software Messages go one way only. The server must be publicly reachable. |
| Code | |||
| GitLab Community EditionMIT, open core | Settings such as branch protection and required pipelines as evidence, and the SBOM if you wish. | CI job | DostępneDroga: CI job Not yet tested with the original software Only the core is open source. Some checks need paid features, for example required approvals. |
Beta means: you switch the connector on deliberately, and there is no service commitment yet. Until the test against the real system has passed, it reads and shows your data but closes and changes nothing in Complass automatically. “Not yet tested with the original software” means: the test against a real installation is still to come. Licences as stated in the projects’ repositories, as of 4 November 2026.
What you save and what remains
Open source lowers licence costs. That does not make everything free, so here is the full picture.
What goes away
- The licence fee for the tool
- Exports, spreadsheet upkeep and emails for every status
What stays with you
- Installing, running, updating and backing up the tool
- Support or enterprise editions from the vendor, if you need them
What belongs to Complass
- Inventory, vulnerabilities, hardening and evidence: included from Professional, in Start i Business with the add-on module Connectors
- Keycloak: the same, or with the add-on module Przeglądy dostępu
- Zammad: included from Professional, its own add-on module below that
- Mattermost: included from Business
Three routes to Complass
How the data flows depends on where the tool runs.
Direct
ComplasstoYour tool
For: NetBox, Snipe-IT, Keycloak, Zammad, Mattermost
Your server is publicly reachable over HTTPS. Complass checks the address and you approve it once. Complass stores credentials encrypted and never shows them again after saving.
Relay
Relay in your networktoComplass
For: Greenbone, Wazuh, Dependency-Track
A readable script in your network reads the tool and transfers only defined fields. It needs no inbound connection, and the credentials for the tool stay with you.
CI job
CI job on your sidetoComplass
For: GitLab
A job in your own pipeline reports to Complass with a signature. Complass does not call GitLab.
Często zadawane pytania
Is the connector free?
No. The open-source tool has no licence fee. The connector is a Complass feature and depends on your package. The package overview shows what is included where.
So what does the tool still cost me?
Your own effort: server, operation, updates and backups, in-house or with a service provider. It is best to check which duties follow from the licence for your use.
Is the free edition enough?
That depends on the tool. The Greenbone Community Feed contains fewer tests than the paid Enterprise Feed. According to the vendor, Mattermost Team Edition is meant for under 250 active users and has no single sign-on. With GitLab, some features belong to the paid tiers.
Our tool only runs internally. Does that work?
Greenbone, Wazuh i Dependency-Track do, through the relay, and GitLab through the CI job. NetBox, Snipe-IT, Keycloak, Zammad i Mattermost need a public HTTPS address today. For assets, the file import stays available in every package.
Can I try the connectors in the trial?
Not yet. Connections become available when your subscription starts. The trial introduces you to Complass; a demo shows the connectors with sample data.
More tools, more connections
You can take over results from further open-source tools as a file, for example from Trivy, Grype, OWASP Dependency-Check, ZAP and Nuclei.
The product names mentioned are trademarks of their respective owners and are used descriptively only. No partnership or endorsement is implied.
Connect your tools to Complass
In the demo we show you the connectors with sample data and work out which route suits your tools.