LastPass

Experience the power of CompassOne

Get a Demo

Integrate. Simplify. Protect.

Collect and store LastPass account activity and security events while giving the Blackpoint SOC deeper visibility into credential-related threats. With full OCSF field mapping, advanced search, and purpose-built SIEM capabilities, this integration strengthens both your compliance posture and your security coverage.

LastPass + CompassOne Overview:

01Collect LastPass security events in real time


Capture LastPass activity logs, user authentication events, vault activity, and security events, all forwarded directly into CompassOne for storage, search, and analysis.

02Strengthen threat detection and SOC investigations


Integrating LastPass provides the 24/7 Blackpoint SOC with additional telemetry to monitor credential activity, triage security events, and support incident investigations — including events like successful logins, console access, and other password-related activity.

03Satisfy compliance, insurance, and regulatory needs


Retain password management logs to meet compliance standards, support regulatory audits, and maintain insurability. Use built-in log search tools to support periodic reviews.

04Advanced log search


Search LastPass events using time and field filters, keyword matching, and advanced query syntax to find exactly what you need during audits, reviews, or investigations.

05Stored in standardized schema


CompassOne maps LastPass events to the Open Cybersecurity Schema Framework (OCSF), making them structured, searchable by field, and compatible with third-party tools for parsing, visualization, and analysis.

06Complementary and extended storage


Get 12 months of log storage for your LastPass events at no additional cost. Longer retention options are available at a predictable monthly rate.

07Simple setup


Integrating LastPass with CompassOne is fast! Generate a webhook token in CompassOne, add it to your LastPass admin console, and watch the events flow.