Signal LoomSIGNAL LOOM
Integrations

Keep your tools. We make them agree on the truth.

Each tool you own sees one slice of what an agent is doing. Signal Loom correlates the slices into a single accountable record per agent, and revokes at the authority that issued each credential.

IDENTITY PROVIDERS
Where the account lives, and where a token is revoked.
Microsoft Entra ID Okta auth0 Google Workspace Active Directory Ping Identity
SECRETS & KEY STORES
Where the secret is held, and where it is destroyed.
OpenBao HashiCorp Vault AWS Secrets Manager Azure Key Vault Google Secret Manager
CERTIFICATE AUTHORITIES
Where the certificate was issued, and where it is revoked.
Microsoft AD CS AWS Private CA cert-manager Let's Encrypt / ACME Smallstep
CLOUD & WORKLOAD IDENTITY
Where the role is assumed, and where it is withdrawn.
AWS IAM Azure Managed Identity Google Cloud IAM Kubernetes SPIFFE / SPIRE NVIDIA
AGENT FRAMEWORKS & MODELS
Where the agent is built, and where its identity is bound.
Anthropic LangChain Model Context Protocol Microsoft Copilot Studio Amazon Bedrock Google Vertex AI
SECURITY, DATA & DELIVERY
Where the evidence goes, and where the slices come from.
Orca Security Cloudflare GitLab neo4j IBM ControlPlane
Runs anywhere

Deployed inside your environment. Identity data never leaves it.

Kubernetes-native, built on open-source foundations, with customer-held encryption keys. No lock-in, and no requirement to hand identity data to a third party. Single-cloud identity systems only work inside the cloud they came from, and neither is an option when the data is not allowed to move.

Your environment
Signal LoomRuns here
Any public cloud
Your data center
Sovereign regions
Air-gapped, no outbound
Identity data leaving
Framework coverage

Evidence mapped to the frameworks you already answer to.

SOC 2 Type II
MAPPED
NIST CSF 2.0
MAPPED
ISO 27001:2022
MAPPED
ISO/IEC 42001
MAPPED
Not on this page? The provider SDK is open source and the data schema is published, so an integration is a contribution rather than a roadmap request.

Point it at your own stack for a dollar.

Sixty days, every feature on, discovery uncapped. The findings are yours either way.