Integrations@endsection INTEGRATIONS & APIs@endsection Connect Headx to the tools you already use@endsection 1.0@endsection Integrations — Headx Monitor (Slack, Teams, REST API, Webhooks, SIEM)
TRUST & COMPLIANCE

Native integrations for Slack, Microsoft Teams, SIEMs, HRMS, and Active Directory. Plus a full REST API, signed webhooks, and a published roadmap.

9 native integrations REST API + Webhooks HMAC-SHA256 signed 6 more in roadmap
Last updated June 13, 2026 IST · Document version 1.0 · Reviewed quarterly
Chat ops
Slack & Teams
Alerts, digests, agent status
SIEM export
5 platforms
Splunk, Sentinel, Elastic, QRadar, syslog
HRMS
CSV + roadmap
Zoho, Keka, greytHR, SumHR, Darwinbox
REST API
OpenAPI 3.1
Bearer auth · 60 req/min
Webhooks
14 event types
HMAC-SHA256 signed JSON
Directory
AD / LDAP
On-Premise sync

1 Native integrations available today

IntegrationUse caseDirection
SlackReal-time DLP alerts, daily productivity digest, agent offline notificationsHeadx → Slack
Microsoft TeamsSame as Slack — alerts and digests routed to a Teams channelHeadx → Teams
Email / SMTPAlert emails, scheduled reports, weekly summariesHeadx → Email
REST APIProgrammatic access to all data — agents, employees, screenshots, activity, DLP alertsBidirectional
WebhooksEvent-driven push for any signal — DLP fires, employee login, agent offline, USB eventHeadx → Any system
CashfreeSubscription billing for Indian customers (default)Headx → Cashfree
RazorpayAlternative billing gatewayHeadx → Razorpay
Group PolicyMass-deploy the Windows agent across the fleet via MSIEndpoint mgmt → Headx
Active Directory (LDAP)Sync employee directory and user attributes (On-Premise edition)AD → Headx

2 SIEM and SOC integration

Headx exports security signals to popular SIEM platforms via webhooks and a structured event log:

  • Splunk — HTTP Event Collector (HEC) endpoint configured per tenant
  • Microsoft Sentinel — REST API ingestion via Log Analytics
  • Elastic Stack / Elastic SIEM — Beats agent reads the Headx events log
  • IBM QRadar — Syslog forward from Headx server (On-Premise)
  • Generic syslog — Any SIEM that accepts RFC 5424 syslog
SOC analysts can subscribe to the full UEBA risk feed, DLP alert stream, and USB / file-access event log via SIEM connectors — turn-key correlation rules available on request.

3 HRMS / payroll integration

Auto-generated timesheets can be exported as CSV for ingestion by:

  • Zoho People
  • Keka
  • greytHR
  • SumHR
  • Darwinbox
  • Any HRMS that accepts CSV timesheet import (almost all do)

Direct API integration with Zoho People and Keka is on the roadmap for Q3 2026.

4 REST API basics

Every Headx instance has a documented REST API mounted at /api/v1/. Authentication uses bearer tokens issued from the admin panel (Settings → API Keys). Rate-limited to 60 requests/minute per token by default; higher limits available on request.

Key endpoints

MethodEndpointReturns
GET/api/v1/employeesEmployees with pagination & filters
GET/api/v1/agentsAgents and status
GET/api/v1/activityActivity log slice (filter by employee + date)
GET/api/v1/screenshotsScreenshot metadata (URLs signed and short-lived)
GET/api/v1/dlp/alertsDLP alert feed
POST/api/v1/policiesCreate or update monitoring policy
GET/api/v1/reports/productivityProductivity summary

Full OpenAPI 3.1 spec available in your admin panel under Settings → API Documentation.

5 Webhooks

Configure outbound webhooks in Settings → Webhooks. Payload is JSON, signed with HMAC-SHA256 using a per-webhook secret to prevent forgery.

Available events

  • agent.online, agent.offline, agent.installed, agent.uninstalled
  • employee.created, employee.updated, employee.deactivated
  • screenshot.captured (high-volume — filter carefully)
  • dlp.alert, dlp.alert.resolved
  • ueba.risk.high, ueba.risk.critical
  • session.started, session.ended
  • usb.connected, usb.write.blocked
  • policy.updated, policy.applied

6 Custom integration

Need to integrate with a tool not listed? Two paths:

  1. Webhook + your code — receive Headx events at a webhook endpoint you control, then call whichever third-party API you need. Most common pattern.
  2. Custom integration service — Headx engineering team builds a native integration for you (paid engagement, typical SOW: 2-4 weeks).

Both paths are documented on the contact page — email sales@headx.in to discuss.

7 Roadmap

TargetIntegrationStatus
Q3 2026Native Zoho People, Keka, greytHR integrations Planned
Q3 2026Okta SSO and Azure AD SSO Planned
Q4 2026Jira and ServiceNow ticketing integration for DLP-alert workflow Planned
Q4 2026Power BI and Looker Studio connectors Planned
Q1 2027Salesforce / HubSpot CRM activity sync Scoped

Need detailed audit evidence or a signed DPA?

The full Statement of Applicability, latest penetration-test summary, sub-processor register with annual review records, and pre-filled CAIQ / SIG questionnaires are available under NDA — typically within 24 hours (IST business days).