Orchestration & Automation apps

An app, formerly called extension or integration, is a collection of playbook components, code executables or both that represent an end-to-end function and is deployed to the IBM Security Orchestration & Automation application.

Playbook components can include rules, workflows, Python scripts, custom fields, data tables and message destinations. A code executable can access and return external data, interact or integrate with other security systems, or be a utility that performs a specific action.

An app is available in a format that supports the App Host Kubernetes-based container environments.

Note: There are also apps in the form of plug-ins that escalate cases to the Orchestration & Automation application using the REST API directly. You do not need an App Host or integration server for these plug-ins.

You can download and install container-based apps directly from the Apps tab, as described in the Apps section of the System Administrator Guide.

There are a wide variety of apps available on the IBM App Exchange. The apps you use depend on your use case and your specific security systems.