A system, method, and apparatus for implementing workflows across multiple differing systems and devices is provided herein. During operation, a graphical-user interface provides a user with a list of triggers and a list of actions. A user creates a workflow by dragging a trigger and at least one action to an area of a screen (workspace) and then connecting them with a line or arc. If a security ecosystem is unable to execute the created workflow, the necessary components needed to execute the workflow will be provided in a small area on the screen (workspace).