Connect the systems you already run
Each integration is per tenant, opt-in, set up by an operator at onboarding, and off until then. It lands with the phase whose data it carries. These are integrations, not partnerships or certified marketplace apps. The status on each row is marketing availability — planned until that phase is accepted.
Phase 1 sign-in is Microsoft Entra ID. Google Workspace and Okta sign-in are Phase 5: a later phase, optional, and not required. They stay planned, the same as every other integration here.
Collect, correlate, alert, review and verify — including the on-site appliance — is described on the managed assurance page. Integrations read and notify only. A notification is not an after-hours response; engineers respond during business hours.
Integration catalogue
Sign-in
Phase 1
- Microsoft Entra IDPlanned
Phase 1 sign-in through the client’s Entra ID directory — single-tenant with B2B guest onboarding, or multi-tenant.
Phase 5 · later phase, optional
- Google WorkspacePlanned
Phase 5 sign-in through the client’s Google Workspace directory. Later phase, optional, and not required.
- OktaPlanned
Phase 5 sign-in through the client’s Okta directory. Later phase, optional, and not required.
Tenant API and automation· Phase 2
- Tenant API and webhooksPlanned
Versioned per-tenant API and signed webhooks for the records the portal already shows.
- Automation recipes (n8n, Make, Zapier)Planned
Example recipes that call the tenant API or consume webhooks — documentation only, not a store listing.
Notifications and paging· Phase 2
- Email, Slack, Microsoft Teams, Google ChatPlanned
Per-tenant notifications to the client’s own channels. Not a substitute for business-hours engineer response.
- PagerDuty and Jira Service ManagementPlanned
Optional on-call paging into the client’s existing paging tools.
Ticketing and MSP PSAs· Phase 2
- ServiceNowPlanned
Ticketing that mirrors OmniNet actions. Closing a ticket means awaiting verification — Postgres stays the system of record.
- Other ITSM toolsPlanned
Additional ITSM connectors after ServiceNow, same mirror-and-verify model.
- MSP PSAs (ConnectWise, Autotask, HaloPSA)Planned
PSA ticketing for managed-service operators, opt-in per tenant.
Report delivery· Phase 2
- Microsoft 365 report deliveryPlanned
Engineer-reviewed reports delivered into the client’s Microsoft 365 workspace.
- Google Workspace report deliveryPlanned
Engineer-reviewed reports delivered into the client’s Google Workspace.
BI datasets· Phase 2
- Power BIPlanned
Versioned BI dataset for Power BI — sanitized records only.
- TableauPlanned
Versioned BI dataset for Tableau — sanitized records only.
- Looker StudioPlanned
Versioned BI dataset for Looker Studio — sanitized records only.
Network controllers· Phase 3
- Cisco MerakiPlanned
Read-only network controller API for inventory and change context.
- UniFiPlanned
Read-only network controller API for inventory and change context.
- Aruba CentralPlanned
Read-only network controller API for inventory and change context.
- Juniper MistPlanned
Read-only network controller API for inventory and change context.
- FortinetPlanned
Read-only network controller API for inventory and change context.
Device inventory· Phase 3
- Microsoft Graph device inventoryPlanned
Read-only device inventory from Microsoft Graph where the tenant opts in.
- Google Workspace device inventoryPlanned
Read-only device inventory from Google Workspace Admin SDK where the tenant opts in.
CMDB· Phase 4
- ServiceNow CMDBPlanned
Asset sync into the client’s ServiceNow CMDB — Postgres remains the authority for actions.
SIEM feeds· Phase 4
- SIEM feedsPlanned
Sanitized security-tool feeds into the client’s SIEM — never raw telemetry bodies.