Integrations
Keep your tools. We make them agree on the truth.
Each tool you own sees one slice of what an agent is doing. Signal Loom correlates the slices into a single accountable record per agent, and revokes at the authority that issued each credential.
IDENTITY PROVIDERS
Where the account lives, and where a token is revoked.
Microsoft Entra ID
Okta
auth0
Google Workspace
Active Directory
Ping Identity
SECRETS & KEY STORES
Where the secret is held, and where it is destroyed.
OpenBao
HashiCorp Vault
AWS Secrets Manager
Azure Key Vault
Google Secret Manager
CERTIFICATE AUTHORITIES
Where the certificate was issued, and where it is revoked.
Microsoft AD CS
AWS Private CA
cert-manager
Let's Encrypt / ACME
Smallstep
CLOUD & WORKLOAD IDENTITY
Where the role is assumed, and where it is withdrawn.
AWS IAM
Azure Managed Identity
Google Cloud IAM
Kubernetes
SPIFFE / SPIRE
NVIDIA
AGENT FRAMEWORKS & MODELS
Where the agent is built, and where its identity is bound.
Anthropic
LangChain
Model Context Protocol
Microsoft Copilot Studio
Amazon Bedrock
Google Vertex AI
SECURITY, DATA & DELIVERY
Where the evidence goes, and where the slices come from.
Orca Security
Cloudflare
GitLab
neo4j
IBM
ControlPlane
Runs anywhere
Deployed inside your environment. Identity data never leaves it.
Kubernetes-native, built on open-source foundations, with customer-held encryption keys. No lock-in, and no requirement to hand identity data to a third party. Single-cloud identity systems only work inside the cloud they came from, and neither is an option when the data is not allowed to move.
Your environment
Signal LoomRuns here
Any public cloud
Your data center
Sovereign regions
Air-gapped, no outbound
Identity data leaving
✕
Framework coverage
Evidence mapped to the frameworks you already answer to.
SOC 2 Type II
MAPPED
NIST CSF 2.0
MAPPED
ISO 27001:2022
MAPPED
ISO/IEC 42001
MAPPED
Not on this page? The provider SDK is open source and the data schema is published, so an integration is a contribution rather than a roadmap request.
Point it at your own stack for a dollar.
Sixty days, every feature on, discovery uncapped. The findings are yours either way.