Find the integrations you need

Read-only organization and repository evidence.

IAM, CloudTrail, Security Hub, CloudWatch, encryption, and backup evidence.

Read-only Jira Cloud change, incident, and access-review tickets for SOC 2 CC8.1, CC7.3, and CC6.3. Backend 0.1.16 or later; site-domain tokens without scopes. Up to 1,000 history events per issue; incomplete collection is rejected. Account permissions determine visible issues.

Read-only change and incident tickets for SOC 2 CC8.1 and CC7.3. Backend 0.1.13 or later; up to 1,000 history events per issue, with incomplete collection rejected.

AuditFetch Local only; hosted remains Preview. Read-only Directory snapshots of enrolled-2SV users, currently suspended users, and super administrators for SOC 2 CC6.1, CC6.2, and CC6.3 review. Customer-owned OAuth client and manual offline-grant setup. These filtered records do not establish all-user MFA enforcement, timely offboarding, or least privilege. Up to 100 pages/10,000 matching users per operation; incomplete collection is rejected. Search can lag changes.

AuditFetch Local only; hosted remains Preview. Read-only snapshots of the default user listing, listed users’ MFA factor enrollments, and currently deprovisioned users for SOC 2 CC6.1/CC6.2 review. Organization-wide Read-only Administrator SSWS token and Okta organization domain required. These observations do not establish active-only inventory, enforced MFA, timely offboarding or least privilege. Group evidence is outside this GA offer. Up to 100 pages/10,000 records per operation; incomplete collection is rejected. Tokens expire after 30 days of inactivity; no automatic token rotation or keep-alive.

AuditFetch Local only; hosted remains Preview. Read-only monitor configuration and monitor change-event snapshots for SOC 2 CC7.2 review. The monitor recipe requires the auditfetch:monitoring tag; the separate audit recipe searches organization-visible monitor changes without that tag restriction. Dedicated reader service account, explicitly scoped monitors_read/audit_logs_read Application key, organization API key and Audit Trail access required. These snapshots do not establish alert coverage, effectiveness or timely response. Audit search is bounded by 100 pages/10,000 events; incomplete collection is rejected. US1 live-qualified; creation/modification observed, deletion not exercised. No automatic key rotation.

Available for AuditFetch Local; hosted WorkOS remains Preview. Collect application users, organization memberships, invitations, Directory Sync users and groups, and selected audit events. These records support access review; they do not prove MFA enforcement or complete access history. Requires a WorkOS API key and organization ID; Directory Sync also requires a directory in that organization. Collection does not change users, memberships, groups, invitations or your Local sign-in method. Audit-log collection requests an export. Verify checks user-read access; collect and review each selected source to confirm its other permissions.

Capture evidence from approved pages with a reviewed browser workflow.

Explore the product with sample data. Samples are not audit evidence.

Download an evidence packet with integrity checks.

Download an evidence packet with integrity checks.

Download an evidence packet with integrity checks.

Download an evidence packet with integrity checks.

Explicit user-approved evidence sync.

Explicit user-approved evidence sync.

Not available in the current release.