Compliance Integrations
80+ native integrations — and a clean API for everything else.
Why teams choose this
5-minute setup
Connect each integration via OAuth or read-only IAM role.
Cloud-native
Deep integrations with AWS, Azure and GCP across security, IAM and config.
IAM & HR
Okta, Azure AD, Google Workspace, Workday and BambooHR keep access reviews current.
Ticketing & SCM
Jira, ServiceNow, Linear, GitHub and GitLab feed change-management evidence.
What's included
- AWS, Azure, GCP, Oracle Cloud, Kubernetes
- Okta, Azure AD, Google Workspace, JumpCloud
- GitHub, GitLab, Bitbucket, CircleCI
- Jira, ServiceNow, Linear, PagerDuty
- Open evidence API for custom integrations
How it works
- 01Connect
Add your domain or vendor list — no agents, no DNS changes. each integration starts within minutes.
- 02Analyze
Our engine continuously ingests open-source intelligence, scan data and threat feeds to produce an objective risk score.
- 03Act
Receive prioritized remediations, alerts and exportable evidence — share with your team, board or auditors.
Compliance Integrations — frequently asked questions
- Do you need write access to my cloud accounts?
- No. All cloud integrations are read-only by default. Optional remediation actions require explicit opt-in.
- How is integration data secured?
- Per-tenant encryption at rest and in transit. SOC 2 Type II and ISO 27001 certified.
- What if my tool isn't listed?
- Use the evidence API to push custom data, or talk to us about building a native integration.
- Which cloud providers are supported?
- AWS, Azure, GCP, Oracle Cloud and Kubernetes — across compute, storage, IAM, KMS, config and security services. Connection is read-only by default via IAM role / managed identity / service account.
- How long does an integration take to set up?
- Median 5 minutes for OAuth-based integrations (Okta, Google Workspace, GitHub, Slack) and 10–15 minutes for cloud IAM-role integrations. No agents to deploy.
- Can I build a custom integration?
- Yes. The evidence API accepts arbitrary JSON payloads tagged to any control, plus webhooks for event-driven evidence. Most teams ship a custom integration in under a day.
Related capabilities
Ready to see Compliance Integrations in action?
Talk to our team about a 30-minute walkthrough tailored to your environment, or run a free non-intrusive scan of any domain.