Live workspace. Durable storage schema active — live connectors, billing, and AI automation are activation-gated.View Activation Status
Signed out
Sign in as the approved QA user before running RLS-bound QA.
Sign in

Integrations

Connect your workspace and developer tools for automated evidence collection.

Ready for future OAuth activation
Microsoft 365
MFA status, Conditional Access policies, Defender alerts
Evidence Supported:

Identity, Device Management, Email Security

Data Flow
Connector signal
Automation evidence preview
Finding preview
Durable save only when operator-gated persistence is enabled
Operator activation required for full functionality.Uses sample connector signals for preview.
View automation previewCheck launch readiness
Ready for future OAuth activation
Google Workspace
2SV enforcement, External sharing policies, Admin log events
Evidence Supported:

Identity, Email Security, Drive Sharing

Data Flow
Connector signal
Automation evidence preview
Finding preview
Durable save only when operator-gated persistence is enabled
Operator activation required for full functionality.Uses sample connector signals for preview.
View automation previewCheck launch readiness
Ready for future OAuth activation
GitHub
Branch protection, Dependabot alerts, Secret scanning results
Evidence Supported:

Source Code, CI/CD, Secret Scanning

Data Flow
Connector signal
Automation evidence preview
Finding preview
Durable save only when operator-gated persistence is enabled
Operator activation required for full functionality.Uses sample connector signals for preview.
View automation previewCheck launch readiness
Ready for future OAuth activation
Slack
Enterprise Grid settings, External collaboration policies
Evidence Supported:

Communications, Access Control

Data Flow
Connector signal
Automation evidence preview
Finding preview
Durable save only when operator-gated persistence is enabled
Preview only. Controlled private pilot functionality.Uses sample connector signals for preview.
View automation previewCheck launch readiness
Ready for future OAuth activation
Jira / Confluence
Change approval workflows, Access request logs
Evidence Supported:

Change Management, Ticketing, Documentation

Data Flow
Connector signal
Automation evidence preview
Finding preview
Durable save only when operator-gated persistence is enabled
Preview only. Controlled private pilot functionality.Uses sample connector signals for preview.
View automation previewCheck launch readiness
Ready for future OAuth activation
Okta / Entra ID
SSO enforcement, Lifecycle management logs
Evidence Supported:

Identity, Access Management

Data Flow
Connector signal
Automation evidence preview
Finding preview
Durable save only when operator-gated persistence is enabled
Preview only. Controlled private pilot functionality.Uses sample connector signals for preview.
View automation previewCheck launch readiness
Controlled Private Pilot Access
Integration flow operations and team workspace database persistence

Full self-serve integration capabilities, live synchronization, and durable evidence persistence require operator activation for this environment. Until activation is completed, you are viewing the automation evidence preview using safe sample connector signals.

Review evidence preview
Connector Activation Gates & Readiness
Review what is required to enable automated OAuth connectors.

GitHub
Dry-Run Only

  • Required Env Vars: GITHUB_APP_CLIENT_ID, GITHUB_APP_CLIENT_SECRET
  • Scopes: admin:org (Scope review required)
  • Callback URL: /api/integrations/callback/github
  • Read-Only: No (admin:org requested)
  • Safe for Pilot: Yes
  • Operator Action: Configure GitHub App credentials in environment variables or tenant settings.
  • Capabilities: Automatically maps Copilot usage and Secret Scanning alerts.

Microsoft 365
Dry-Run Only

  • Required Env Vars: MICROSOFT_CLIENT_ID, MICROSOFT_CLIENT_SECRET, MICROSOFT_TENANT_ID
  • Scopes: Policy.Read.All, User.Read.All, Directory.Read.All
  • Callback URL: /api/compliance/connectors/microsoft365/callback
  • Read-Only: Yes
  • Safe for Pilot: Yes
  • Operator Action: Create Azure AD app registration and configure credentials.
  • Capabilities: Maps Entra MFA enforcement, guest access, and Purview Copilot rules.

Google Workspace
Dry-Run Only

  • Required Env Vars: GOOGLE_OAUTH_CLIENT_ID, GOOGLE_OAUTH_CLIENT_SECRET
  • Scopes: admin.directory.user.readonly, drive.metadata.readonly
  • Callback URL: /api/integrations/callback/google
  • Read-Only: Yes
  • Safe for Pilot: Requires explicit operator approval avoiding compromised projects.
  • Operator Action: Provide safe Service Account keys.
  • Capabilities: Maps public Drive files and Workspace review limits.