The Netskope Cloud Exchange, running on Amazon EC2 as an image, delivers four integration tools to its users. First, it improves security operations by pushing rich event, alert, and event streaming logs from Netskope into your SIEM, data lake, or XDR/MDR service. Second, it automates multi-directional IOC sharing between your defenses including Netskope, endpoints, email gateways, and SIEMs. Third, it automates service ticket creation and notifications based on selected Netskope alerts in IT service management and collaboration tools. Fourth, it normalizes multiple user and device risk scores and invokes investigations into or actions in response to raw, aggregate or combinations of risk scores in order to reduce overall risk to the enterprise.