Vectra AI and Superna Integration
Support Statement
This documentation is provided "as is" without support for 3rd party software. The level of support for this integration guide is best effort without any SLA on response time. No 3rd party product support can be provided by Superna directly. 3rd party components require support contracts. See EULA for more details.
Overview
Vectra AI and Superna: Safeguard your data with an integrated and automated approach to security.
Organizations managing hybrid environments struggle to maintain cohesive security programs, particularly regarding threat detection and response. This integration bridges detection and response through automation playbooks and AI technologies, combining network security with cyber storage security.
The solution enables SOC teams to execute automated protective measures by merging Vectra AI's early threat detection with Superna's proactive data protection capabilities.
Key Benefits
- Rapid, confident, automatic threat response — Automated playbooks execute without manual intervention.
- AI-driven threat prioritization — Vectra AI Attack Signal Intelligence surfaces the highest-risk threats first.
- Mitigation before attack completion — Protective actions execute before attacks fully manifest, avoiding costly recovery.
- Real-time auditing and historical forensics — Superna provides data-layer analytics for root cause analysis and impact assessment.
Solution Components
- Automation playbooks — Pre-built workflows for network and storage protection.
- Vectra AI Attack Signal Intelligence — Identifies and prioritizes suspicious activity on the network.
- Superna Zero Trust — Creates immutable data snapshots and locks out compromised user accounts.
- Real-time analytics — Monitors data access at the storage layer.
- Historic forensics — Provides evidence for post-incident investigation and remediation.
How It Works
When Vectra AI detects suspicious activity targeting data, it notifies Superna through automation playbooks. Superna immediately places critical data into an immutable state and locks out the compromised user account without impacting other users' production data access.
Superna provides real-time analytics and historical forensics at the data layer to support root cause analysis and full impact assessment.

Available Playbooks
-
Vectra AI – Superna Critical Data Protection PlayBook — Executes when data security risks emerge. Creates immutable snapshots for data protection and recovery and detects malicious activity through Cyber Storage analytics.
-
User Request Storage Lockout Playbook — Accepts a
userIDinput to restrict that user's storage access. Enables proactive data destruction prevention when threat levels increase.
Sample playbooks are available at the Vectra AI XSOAR GitHub repository.