Connect everything your organization runs on

Atlassian

Monitor Jira and Confluence projects, permissions, users, and installed apps.

GitLab

Track project settings, merge request policies, and CI/CD pipeline configurations.

Vercel

Monitor deployments, environment variables, team members, and project settings.

Netlify

Monitor sites, DNS zones, deploys, team members, and account settings.

CircleCI

Track pipelines, project settings, contexts, and environment variables.

Bitbucket

Monitor repository access, branch restrictions, and workspace settings.

LaunchDarkly

Monitor feature flags, environments, team members, and access controls.

HashiCorp

Track HCP organization access, projects, and Vault/Boundary/Consul cluster exposure, plus the member roster and service-principal key audit.

Postman

Track workspaces and their exposure — flag publicly visible workspaces that can leak API definitions, collections, and secrets.

npm

Track who can publish your packages and when new versions are published.

RubyGems

Track who can publish your gems and when new versions are released.

Hex.pm

Track who can access your Hex.pm organization and publish your packages, plus API-key hygiene and the org audit log.

MongoDB Atlas

Monitor organization access, projects, clusters, encryption, backups, and network exposure.

Supabase

Track Supabase projects, database settings, network restrictions, SSL enforcement, and auth configuration.

DigitalOcean

Monitor droplets, databases, firewalls, Kubernetes clusters, and team members.

Tailscale

Monitor network devices, ACL policies, users, and DNS settings.

Redis Cloud

Track databases and their security posture — TLS, encryption, persistence, source-IP allow lists, and endpoint exposure.

Linode

Track instances, firewalls, NodeBalancers, and account access controls.

Vultr

Track account access, sub-users, and API key permissions.

Fortinet

Inventory your registered Fortinet units — FortiGate firewalls, FortiWeb WAFs, switches, and access points — with support-contract and end-of-support posture from FortiCloud.

Microsoft 365

Monitor users, directory roles, conditional access policies, and app registrations.

Okta

Monitor SSO configurations, MFA enforcement, user lifecycle, and app assignments.

Microsoft Entra ID

Monitor your Entra tenant — directory users and guests, privileged role assignments (Global Admins), Conditional Access posture, security defaults, and optionally Intune devices and Microsoft Teams.

Auth0

Monitor the security posture of your Auth0 tenant — tenant settings (MFA, attack protection, sessions), applications, and connections. Note: Auth0 does not expose dashboard tenant members through its API, so Auth0 administrators cannot be synced as users.

Duo Security

Monitor your Cisco Duo account, its end-users, and administrators — including MFA-enrollment status — via a read-only Admin API application.

1Password

Monitor vaults, groups, users, service accounts, and access policies.

Bitwarden

Monitor organization policy posture — two-step login enforcement, master-password rules, SSO requirements — plus members and their 2FA status, collections, and groups.

LastPass

Monitor LastPass Enterprise account posture — MFA coverage, master-password strength, admins, and dormant accounts — plus users and shared folders with their access lists.

Clerk

Monitor the security posture of a Clerk application instance — attack and bot protection, sign-up restrictions, enterprise SSO connections, allowed origins and redirect URLs, organization settings, and domains. Connect one instance per secret key. Note: Clerk does not expose account administrators through its API, so administrators cannot be synced; MFA, password policy, and sign-in methods are also not readable via the API.

WorkOS

Track users, organizations, SSO connections, and directory sync across your WorkOS environment.

Ping Identity

Monitor your PingOne organization, its environments, and the administrators who can manage the tenant using a worker application.

Adobe Admin Console

Track users, groups, product profiles, admin roles, and the paid Creative Cloud licenses often missed during offboarding.

Keeper Security

Monitor enterprise vault governance — team membership, shared folder access, user roster, and offboarding signals for the Keeper password manager.

Cloudflare

Monitor DNS records, WAF rules, SSL/TLS settings, and access policies.

WordPress

Monitor WordPress sites, plugins, themes, users, and configuration via the Outpost plugin.

Shopify

Monitor store settings, staff accounts, installed apps, and theme configurations.

Contentful

Track organization members, spaces, environments, API keys, and who can publish to production content.

Webflow

Track sites, custom domains, publish state, and workspace member access.

Akamai

Track CDN configurations, security policies, DNS zones, and edge settings.

Fastly

Monitor CDN services, VCL configurations, TLS certificates, and edge settings.

WP Engine

Monitor hosted WordPress sites, environments, users, and account settings.

GoDaddy

Track domains, DNS records, SSL certificates, and account settings.

Track every storefront and control-panel user across the account via an account-level API token.

Adobe Experience Manager

Inventory AEM programs, environments, and sites, with per-environment access levels, content permissions, and publish status.

ngrok

Soon

Monitor tunnels, endpoints, edge configurations, and access controls.

Microsoft Teams

Install the Outpost bot to post alerts to Teams channels, with self-updating finding cards and in-channel search.

Zoom

Sync account users, roles, and license types, plus account-level security settings.

SendGrid

Track API keys, sender identities, templates, and email activity.

PagerDuty

Trigger incidents and route alerts to the right on-call responders.

Twilio

Soon

Monitor accounts, phone numbers, messaging services, and API keys.

RingCentral

Monitor your RingCentral (RingEX) account — the people with a phone seat, their roles, who holds admin, and which seats were provisioned but never activated — via a read-only JWT credential.

Send Outpost events to any HTTPS endpoint. Each delivery is signed with an HMAC secret and retried with exponential backoff.

Salesforce

Monitor users, permissions, connected apps, and security settings. Track user offboarding.

HubSpot

Monitor users, teams, connected apps, and portal security settings.

Zendesk

Monitor agents, apps, roles, triggers, and security configurations.

Microsoft Dynamics 365

Track the Dataverse environment, business units, teams, users, and security roles via an Entra app registration.

ServiceNow

Track users, roles, ACLs, system properties, and configuration items.

NetSuite

Track users, roles, subsidiaries, integrations, and security configurations.

Zoho CRM

See who has access to your Zoho CRM org — users, their roles and profiles, admins — plus org-level security posture (data privacy, HIPAA, SSO) and per-profile permissions.

Pipedrive

Audit access to your Pipedrive CRM: who has admin rights, dormant accounts, and permission set configuration.

Marketo

Monitor users, API services, LaunchPoint integrations, and campaign configurations.

ActiveCampaign

Soon

Monitor users, automations, integrations, and account settings.

Gong

See who has access to your Gong workspace and how it is configured — users, permission profiles, workspaces, and scorecards.

Gainsight

Monitor who has access to your Gainsight tenant, surface super-admins, and track license usage.

Apollo.io

See who has access to your Apollo workspace — members and their status — and catch members who weren't offboarded.

Chorus

Monitor your Chorus (ZoomInfo Chorus) workspace — the members with access to call recordings and deal transcripts — via a personal API token.

Salesloft

Monitor your Salesloft workspace — which users have active accounts, who holds Team Admin, and how many users have a corporate mailbox connected — via OAuth 2.0 client credentials.

Snowflake

Track the account, databases, warehouses, users, and network policies via key-pair auth.

Databricks

Monitor workspace users, clusters, jobs, secrets, and access controls.

Tableau

Inventory published workbooks, their owners and projects, and resolve who can actually access each one.

Looker

Monitor users, roles, connections, models, and content access controls.

Power BI

Monitor tenant security settings and who has access to every workspace — publish-to-web, external sharing, data export, and per-workspace access lists.

Segment

Track sources, destinations, workspace members, and data governance settings.

Elastic Cloud

Monitor deployments, users, API keys, and security configurations.

dbt Cloud

Govern access to your dbt Cloud account — who can log in, their groups and permissions, IP restriction posture, and per-project exposure — via a service-account API token. Works with dbt Cloud multi-tenant and single-tenant deployments.

Pendo

Govern who can access your product-analytics data: the subscription, its applications, team members and roles, and SSO/SCIM posture.

Metabase

Monitor your Metabase BI instance — the people who can sign in and their groups/superuser roles, auth hardening (SSO enabled, whether local password login still bypasses your IdP, session lifetime), dormant and deactivated accounts, data-source connection count, and the API-key inventory (Pro/Enterprise) — via an Administrators-group API key. Works with self-hosted and Metabase Cloud.

Dynatrace

Monitor environment access, token hygiene (stale/indefinite API tokens), IP allowlist status, audit log enablement, and the full member roster across Dynatrace account and environment assets.

Datadog

Monitor who has access to your Datadog org — users, roles, and MFA gaps — plus API/application keys, SSO/SAML enforcement, and public dashboard exposure.

Sentry

See who has access to your Sentry organization — members, roles, and 2FA/SSO gaps — plus per-project data-privacy posture: data scrubbing, IP scrubbing, and the origins allowed to send events.

Grafana

Monitor Grafana users, teams, service accounts, folder permissions, and data source configurations.

Prometheus

Expose Outpost metrics as a Prometheus-compatible scrape endpoint to graph assets, alerts, and more in any Prometheus-aware dashboard.

New Relic

Soon

Monitor users, API keys, alert policies, and account configurations.

Splunk

Surface Splunk access posture — admin accounts, SSO, token and HEC hygiene — and route alerts into Splunk.

Sumo Logic

Monitor your Sumo Logic account — its users, roles, MFA coverage, and dormant accounts — via a read-only access key.

SolarWinds

Soon

Monitor nodes, alerts, accounts, and network performance configurations.

Site24x7

Soon

Track monitors, alert contacts, user groups, and notification settings.

CrowdStrike

Surface Falcon endpoint posture — sensor coverage and hygiene, open detections, Spotlight vulnerabilities, and console admin accounts.

Snyk

Soon

Track vulnerability scans, project configurations, and security policies.

Wiz

See who has access to your Wiz tenant — console users and their roles, plus service accounts — and surface tenant security posture: SSO/SAML configuration, over-scoped and stale service accounts, and dormant admins.

Jamf Pro

Monitor your Apple device fleet posture from Jamf — registered users, policies, and configuration profiles (FileVault, passcode, restrictions) tracked for drift, plus fleet compliance rollups.

Kandji

Monitor your Apple device fleet posture from Kandji — FileVault disk-encryption coverage, Gatekeeper and firewall enforcement, MDM enrollment, supervision and Activation Lock state, plus Blueprints and Library Items tracked for drift, and admin account access.

Vanta

Monitor compliance frameworks, monitors, and the people Vanta tracks — and push Outpost asset posture, evidence, and vendors back into Vanta.

Drata

Track compliance frameworks, controls, evidence, and personnel monitoring.

Zscaler ZIA

Audit ZIA admin users and roles — surface disabled accounts, password-expired admins, and high-privilege admin sprawl across your Zscaler Internet Access tenant.

Tenable

Monitor who has access to your Tenable Vulnerability Management tenant — console users with their roles and login activity, dormant admins, locked accounts, and SAML configuration.

Rapid7 Insight Platform

Govern your Rapid7 Insight Platform tenant — the control plane for InsightVM, InsightIDR, InsightConnect, InsightAppSec, and other Rapid7 products. Syncs platform console users with their roles (admin vs. member) and surfaces SSO/MFA enforcement posture, disabled and locked accounts, and admin count via an Organization API key.

KnowBe4

Monitor your KnowBe4 (KSAT) account and keep the full user roster current — each person's training status, risk score, phish-prone percentage, groups, and last sign-in — via a read-only Reporting API token.

OpenAI

Monitor organization members and their roles, projects, service accounts, and API keys — including stale or long-lived keys that should be rotated.

Anthropic

See who has access to your Claude organization and workspaces — members and roles, pending invites, and API keys (status, scope, and creator).

Google AI

Soon

Monitor API keys, model access, quotas, and project configurations.

Hugging Face

Monitor organization members and roles, plan, and model/dataset/Space counts via a read-only access token.

LangSmith

See who has access to your LangSmith organization — org members and their roles, workspace count, and which accounts went stale after someone left.

ElevenLabs

Monitor your ElevenLabs workspace — service account key hygiene and webhook inventory.

Stripe

Monitor API keys, webhook endpoints, connected accounts, and payment configurations.

Ramp

Monitor corporate card users, spend policies, departments, and card programs.

Brex

Track card users, spend limits, departments, and account configurations.

Bill.com

Track users, approval policies, vendors, and payment configurations.

Expensify

Monitor who can access your expense workspaces — admins, the approval workflow, the connected accounting integration, and the full employee roster with roles.

SAP Concur

Track who has access to expense reports, invoice processing, travel booking, and financial approvals.

Carta

See who has access to your Carta cap table — equity platform admins, legal, auditor, and investor access grants. The single highest-sensitivity access surface for a company with outside investors.

Spendesk

Monitor your Spendesk spend-management company — the members with access to company spending, cards, and approvals — via OAuth2 client credentials.

Mercury

Monitor your Mercury banking organization — the team members who can access and move money, their roles, and your bank account and card inventory — via a read-only API token.

Notion

Monitor workspace members, integrations, permissions, and sharing settings.

Figma

Monitor your Figma organization, teams, projects, and members using a plan access token.

Asana

Track workspace members, projects, integrations, and access controls.

monday.com

Monitor users, boards, integrations, and workspace configurations.

Linear

Monitor workspace members, teams, projects, issues, webhooks, and installed integrations.

DocuSign

Monitor users, envelopes, templates, and account security settings.

Intercom

Audit who can access customer conversations — teammates, inbox seats, and teams — plus an admin activity log.

Airtable

Discover who has access to which workspaces and bases, their permission levels, enterprise groups, and externally-shared base links.

Canva

Monitor team members, brand kits, shared designs, and access settings.

Zapier

Track connected apps, zaps, team members, and automation configurations.

Discord

Monitor your Discord server — member and role counts, privileged-role exposure, admin accounts, bots, MFA-for-moderation requirement, server verification level, public discovery settings, and connected third-party integrations — via a bot token.

Box

Monitor users, groups, sharing policies, retention settings, and enterprise configurations.

Calendly

Audit who can access your Calendly organization — members, admins, roles, and pending invitations, plus an Enterprise activity log.

Dropbox

Track team members, shared folders, linked apps, and admin settings.

Miro

Soon

Track team members, board access, integrations, and organization settings.

Make

Monitor your Make organizations, teams, members, and the stored connections your automations hold — using a read-only API token.

SurveyMonkey

Audit who holds an active seat in your SurveyMonkey team — members, admins, and pending invites.

Lucid

Audit who can access your Lucid account — members, admins, external guests, and their roles and seats.

Mural

Audit who can access your Mural workspace — members, admins, and external guests — and their roles.

n8n

Monitor your n8n automation instance — the team members who can sign in and their roles, instance hardening (2FA enforcement, SSO, version currency), unprotected webhooks, risky-node usage, and stored-credential risk — via a read-only API key. Works with self-hosted and n8n Cloud.

Frontify

Brand management and digital asset management platform. Surfaces who has access, at what role, and security posture across brands.

Ashby

Monitor who has access to your Ashby ATS organization — admin and elevated-access user inventory, deactivated accounts, and audit log coverage of role changes.

Greenhouse

See who has access to your Greenhouse recruiting account, including site admins, disabled accounts, and external-domain users.

Gusto

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Rippling

Sync employees, employment status, and departments to reconcile HR roster against accounts.

BambooHR

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Justworks

Sync employees, employment status, and departments to reconcile HR roster against accounts.

ADP Workforce Now

Sync employees, employment status, and departments to reconcile HR roster against accounts.

ADP Run

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Paychex Flex

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Paylocity

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Workday

Sync workers, employment status, and departments to reconcile HR roster against accounts.

QuickBooks Payroll

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Paycor

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Paycom

Sync employees, employment status, and departments to reconcile HR roster against accounts.

TriNet

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Namely

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Deel

Sync employees, employment status, and departments to reconcile HR roster against accounts.

HiBob

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Square Payroll

Sync employees, employment status, and departments to reconcile HR roster against accounts.

UKG Pro

Sync employees, employment status, and departments to reconcile HR roster against accounts.

UKG Ready

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Insperity

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Personio

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Sage HR

Sync employees, employment status, and departments to reconcile HR roster against accounts.

OnPay

Sync employees, employment status, and departments to reconcile HR roster against accounts.

Sync employees, employment status, and departments from any other HR or payroll system.

Mailchimp

Monitor audiences, API keys, connected sites, and account settings.

Google Ads

Review who can spend on your ad accounts — the manager-account hierarchy, user access roles, and pending invitations across linked advertiser accounts.

Meta Business Manager

Govern who can manage your brand on Meta: Facebook Page admins, Instagram accounts, ad-account spend access, the people and system users in your Business, and the outside agencies with standing access.

Klaviyo

Audit account members, roles, and pending invites over your customer list and sending.

Hootsuite

Govern publish access to your brand social accounts: connected social profiles, org members and admin roles, and the teams that gate posting access.

Sprout Social

Govern social media access — connected profiles, team members and roles, and SSO/MFA enforcement.

Buffer

Govern publish access to your brand social accounts: connected channels, the workspace owner, 2FA enforcement, and connected apps.

Brevo

See who has access to the account and their permissions, plus sending-domain authentication, authorized senders, and webhooks.

Reddit Ads

Audit who can access your Reddit ad accounts — admins, campaign managers, viewers, and pending invites. Note: Reddit grants ad-account access to personal Reddit accounts (no email/MFA exposed).

Pluralsight

Monitor your Pluralsight Skills plan — the member roster (name, email, teams), license utilization, and who still has access after leaving the company — via a plan-admin API key. Covers offboarding blind spots on tech-skills seats.

Apple App Store

Detect new apps in App Store Connect, see who has access (team members, roles, and per-app visibility), and track per-app settings like bundle id and content rights.

Google Play

Detect new apps published on a connected Play Console developer account, record when new versions roll out, and sync the account member roster.

Track access to something we don't integrate with — a SaaS tool, a shared account, even a physical thing. Record who has access by hand so offboarding has no blind spots.