AxiLayer AI | Integrations | Entra, Okta, Azure, AWS, Google Cloud, Splunk, Sentinel, ServiceNow

Connectors

Identity, clouds, telemetry, security tooling, evidence out

Grouped by what they do for the twelve phases: discovery reads from identity and clouds, control sits in the proxy and the gateway, observation reads your logs, and the signed record goes back to your tools.

Identity and access

How agents and the people who approve them are known. Read-only; AxiLayer never holds the credentials.

LiveMicrosoft Entra IDApp registrations, OAuth consent grants and Entra Agent ID: which AI tools and agents users granted access to. Single sign-on for AxiSentinel and AxiReady.Access: Directory reader, same app registration pattern as SSO

LiveOktaApplication registrations and OAuth grants that reveal AI SaaS and agent identities, and who granted them.Access: Read-only API token

LiveMicrosoft 365 and Google WorkspaceCopilot, Gemini and other AI features in use, by licence and consent grant; Google via the Accessed apps export.Access: Graph read, Workspace admin export

Clouds and AI platforms

Discovery and inventory straight from the cloud, with a reader role the client grants. No search charges the client.

LiveMicrosoft AzureAzure Resource Graph, Azure OpenAI, AI Foundry and Azure ML deployments, models, versions, regions, content filters and logging.Access: Reader role

LiveAmazon Web ServicesResource Explorer and AWS Config: Bedrock and SageMaker endpoints, guardrails, regions, CloudTrail logging.Access: resource-explorer-2:Search, read-only IAM role

LiveGoogle CloudCloud Asset Inventory: Vertex AI and Gemini endpoints, models, regions, audit logs.Access: Cloud Asset Viewer

LiveKubernetesInference workloads, GPU nodes, model volumes and AI-serving containers (vllm, ollama, triton, tgi, nim, llama), by import or by the AXI-Node.Access: Cluster read role or AXI-Node

LiveHosts and endpoints (AXI-Node)Host, container, local agent, MCP server and desktop AI tool discovery; Intune, Jamf and other MDM exports.Access: Signed node key, read-only

LiveVector databases and model filesVector stores, model files on disk (safetensors, GGUF, ONNX) and self-hosted inference.Access: Read access

Telemetry and observability

How live AI traffic reaches the control plane. Prompt text is never stored; only a hash and a length.

LiveOpenTelemetry (OTLP/HTTP)Traces and logs in OpenTelemetry GenAI conventions, OpenInference and OpenLLMetry, at /api/otlp/v1/traces and /logs.Access: AXI-Node key

LiveLLM proxyModel calls pass through one proxy (OpenAI and OpenAI-compatible endpoints), so policy, logging and the stop apply to every model the same way.Access: Customer proxy key

LiveMCP GatewayEvery tool server an agent can call is discovered, gated and approved; unapproved servers are blocked and raise an alert.Access: Gateway in your environment

Logs, SIEM and security tooling

What your security team already runs, read into the same record.

LiveSplunkLog import and search export for AI traffic, agent actions and gateway events.Access: Export or forwarder

LiveElasticLog import in OCSF and native formats.Access: Export

LiveMicrosoft SentinelLog import and alert export so gateway blocks, holds and stops appear beside the rest of the SOC picture.Access: Workspace export

LiveSyslog and Windows eventsStandard log formats read into the AI Radar and the evidence chain.Access: Forwarder

LiveSBOM and vulnerability scannersCycloneDX, SPDX, Trivy and Grype imports; OSV.dev lookup for AI components (the AI-BOM screen).Access: File import

Work, code and service management

Where agents are built and where their incidents and approvals are worked.

LiveGitHub and GitLabAI SDKs, agent frameworks (LangGraph, CrewAI, AutoGen, OpenAI Agents SDK, Semantic Kernel, Google ADK), prompt files and key presence as boolean facts.Access: Read-only app

LiveServiceNowNow Assist and agent exports read for the inventory; incidents and approvals exchanged with the service desk.Access: Admin API read, integration user

LiveSalesforce, Copilot Studio, Power PlatformAgentforce, Copilot Studio and Power Platform agent exports read into the inventory.Access: Agent export

Evidence out

How the record leaves the platform, signed.

LiveCompliance Passport and public verifySigned passport, re-verifiable by anyone at /verify, free.Access: Public

LiveSigned statements and exportsMonthly usage statements (JSON, CSV, PDF), evidence packs, notebooks to CSV, every figure clickable to its records.Access: Signed, ledgered

LiveSigned signals between AxiReady, AxiSentinel and AxiPursuitVersioned, signed messages over HTTPS, retried, idempotent, ledgered on both sides. No shared database.Access: Platform key

LiveWebhooks and evidence APISigned events and evidence records to your ticketing, GRC or data platform.Access: Signed webhook

How connectors behave

Least privilege, signed on the way out

Read-only by default

Discovery connectors read with the lowest role the platform offers (Reader, Viewer, Search). AxiLayer never holds the client's credentials; AxiReady records that a key exists, never its value.

Nothing leaves without a signature

Every export, statement and signal is signed with the platform key and recorded in the ledger on both sides.

Prompt text never stored

Telemetry keeps a SHA-256 and a length for prompts; log bodies are masked.

Your cloud, your data center, air-gapped

Every connector works in the client's own tenant or on-premises; the air-gapped package exchanges files instead of calls.

Three layers, twelve phases

Twelve phases. One platform. One signature.

Phase 01FindDiscover and score

Phase 02FindClassify and plan

Phase 03ControlApprove every tool

Phase 04ControlName every agent

Phase 05ControlGate every action

Phase 06ControlHold for a person

Phase 07ControlWatch behavior

Phase 08ControlQuarantine and stop

Phase 09ControlMonitor to the article

Phase 10ProveTest and re-test

Phase 11ProveSign the evidence

Phase 12ProveVerify, free, forever

AxiReady finds. AxiSentinel gates, holds, quarantines and stops, Always On or On Demand. A qualified AxiLayer AI auditor signs the record.

Works with what you already run