Two layers
Microsoft 365, AWS, Google Workspace, Cloudflare, 1Password. Our specialists run these for you, all five expertly managed.
See what each plan coversThe platform reads and watches these for you, and the findings land in front of our specialists and in your portal. 8 are Live today and 12 are Planned.
Live means it runs on the platform today. Planned means it is designed and ready to build.
See who has access to what, and close it the day someone leaves.
Your Okta users, their sign-in factors and their admin roles join the identity audit and your access reviews.
Stays in Okta: anything beyond users, factors, roles and the log.
What it reads
How it is connected
An OAuth 2.0 service app in your Okta organization.
Your JumpCloud users, devices and sign-in status read in the same shape as Microsoft Entra and Google, so one identity audit covers them all.
Stays in JumpCloud: anything beyond users, devices and factor status.
What it reads
How it is connected
The JumpCloud API, on the same identity model as Okta.
A new hire or a leaving date in BambooHR opens the joiner or leaver checklist, so access follows the HR record.
Stays in BambooHR: payroll, compensation, benefits, leave reasons and every health-related field. The platform reads only and writes nothing back.
What it reads
How it is connected
A per-customer BambooHR API key or OAuth app.
Your Apple devices, AppleCare coverage and Managed Apple Accounts in one inventory. Apple Business covers Apple accounts and devices; it does not sign people into other apps.
Stays in Apple Business: your account settings. A leaver's Apple account is closed by our specialists in Apple Business, and the platform confirms it on its next check.
What it reads
How it is connected
A read-only API account that your Apple Business administrator creates.
Your third cloud checked to the same standard as the first two.
Your Azure subscriptions get the same posture checks and resource inventory as AWS and Google Cloud, with your Defender for Cloud secure score beside them.
Read only: the platform makes zero changes to your subscriptions.
What it reads
How it is connected
Reader and Security Reader roles you assign to the Cloud Sentry Security app already in your tenant.
Detections and findings flow to where your team already looks.
Huntress incidents land as findings with a stated severity, and every device shows whether its agent is running.
Stays in Huntress: remediation actions.
What it reads
How it is connected
One Huntress credential held by Cloud Sentry.
Platform findings flow into your Splunk, a Cloud Sentry app gives your team searches and dashboards over them, and your Splunk alerts come back as findings.
Stays in Splunk: your own indexes and searches.
What it reads
How it is connected
An HTTP Event Collector token you create; it is encrypted and held only on the platform's collector.
Who holds which shared credentials, and every admin change to them.
Sign-in attempts, item usage and admin events from your 1Password feed the identity audit, and a leaver is suspended directly.
Stays private: every vault item's contents.
What it reads
How it is connected
An Events token you enter in the portal, encrypted at rest with its own key and checked when you save it.
Members, groups and shared collections in Bitwarden, with admin and sign-in events, read in the same shape as 1Password.
Stays private: every vault item's contents.
What it reads
How it is connected
An organization API key you enter in the portal, encrypted at rest and checked when you save it.
Admin and sign-in events from Keeper, read in the same shape as 1Password, where your Keeper plan includes event reporting.
Stays private: every vault item's contents.
What it reads
How it is connected
A Keeper Admin REST API key you enter in the portal, encrypted at rest and checked when you save it.
Updates and approvals arrive in the tools your team works in.
Incident updates and notifications post to Slack, and approvals happen with a button, once each person is matched to their portal account.
Stays private: your channel history and message content.
What it reads
How it is connected
A Cloud Sentry Slack app your workspace installs.
Incident updates and notifications arrive in Teams, and approvals happen on a card, once each person is matched to their portal account.
Stays private: your Teams messages and channel content.
What it reads
How it is connected
A Cloud Sentry Teams app, separate from the Cloud Sentry Security app, so your existing consent stays as it is.
Requests you raise in the portal appear in your Jira Service Management, and their status comes back, so your team works from its own queue.
Stays private: your Confluence content.
What it reads
How it is connected
An Atlassian OAuth app for the requests, and an organization API key for the audit log.
Your Zoom users and account security settings join your access reviews and your software register.
Stays private: meeting recordings and chat. The platform writes nothing.
What it reads
How it is connected
A Cloud Sentry app from the Zoom Marketplace.
Your Notion workspace members join your access reviews, with the audit log on Notion Enterprise.
Stays private: every page and database. The platform writes nothing.
What it reads
How it is connected
The Notion API.
The place credentials leak most often, watched for you.
Members without two-factor sign-in, outside collaborators, and Dependabot, code scanning and secret scanning alerts from your GitHub organization, in front of you as findings.
Stays in GitHub: your code. The app reads membership and alerts. Where your GitHub plan leaves out a scanner, the platform says so plainly.
What it reads
How it is connected
A Cloud Sentry GitHub App you install on your organization. Its access tokens are short-lived and minted when needed.
Know who uses which AI tools, with which keys.
Who is in your Claude organization, which API keys exist, and daily Claude Code usage per person, for AI governance and access reviews.
Stays private: every conversation, file and project.
What it reads
How it is connected
An admin key your Claude organization administrator provisions.
Who is in your OpenAI organization, which projects and API keys exist, and the audit trail, for AI governance and access reviews.
Stays private: every conversation.
What it reads
How it is connected
An OpenAI admin key, plus the Compliance API on ChatGPT Enterprise and Edu.
Proof your data is copied, and that it comes back.
Your protected mailboxes, drives and sites set against everything that exists, so a gap is a stated number, with your last tested restore beside it.
Read only: the platform makes zero changes to your tenant.
What it reads
How it is connected
The Microsoft 365 connection the platform already uses.
Checks that your AWS backups, S3 data and databases copy to a second region, and that each copy has actually run.
Read only: the platform makes zero changes to your accounts.
What it reads
How it is connected
The AWS connection the platform already uses.
Tell us which one. Every request reaches a person, and the tools customers ask about are the ones we connect next.
Ask about a tool you useEvery connection here feeds the same platform our specialists work from.
One thread per security domain, from your tools to the work done on them.
Published tiers, and which of the five platforms each one runs.
We use cookies
Essential cookies keep the site running. With your permission, we also use analytics and functional cookies to improve the experience. Read our Cookie Policy.
