If you run it, we support it.
Any system that keeps an audit trail or can send JSON becomes a stream in a chained, signed ledger, with a receipt for every collection and a declared gap for every interval nothing covers.
- 291 sources. Across 18 categories, each with its own page and its own status.
- 2 paths live today. The events API and OpenTelemetry take anything that can send a record; 8 more receivers follow in the first waves.
- One evidence model. Receipts, declared gaps and daily settlement, whatever the source.
Jump to a category
- Cloud infrastructure
- Containers, orchestration and infrastructure as code
- Identity, SSO and directory
- Password managers and secrets
- HR, payroll and workforce
- Code hosting, CI/CD and software supply chain
- Endpoint, MDM and EDR
- Productivity, collaboration and business SaaS
- Databases, warehouses and data platforms
- Payments, finance and accounting
- ITSM, incident, change and on-call
- AI platforms and model operations
- Security operations and observability
- Network and perimeter
- Physical security and facilities
- Backup, resilience and business continuity
- Communications and telephony
- Application frameworks
- Receivers and the API
How to read the list. Each source has a page saying what can be ingested, how it is collected and where its connector stands; Sigilbase does not claim a connector it has not built. Available now works today. First, second and later wave is the order named connectors will ship in; until a source's connector ships, anything that can send JSON reaches Sigilbase through the events API. Through a receiver means no bespoke connector is planned: the source will be reached through a receiver with a parsing profile published alongside, and will get the same receipts, gaps and settlement. A source that will ride another connector says which.
Cloud infrastructure
Control-plane audit trails, configuration snapshots and security findings from the clouds you build on.
-
AWS
Audit logs, log files and configuration snapshots. First wave.
-
Google Cloud
Audit logs and configuration snapshots. First wave.
-
Microsoft Azure
Audit logs, delivered events, log files and configuration snapshots. First wave.
-
Cloudflare
Audit logs, log files and configuration snapshots. Second wave.
-
Hetzner Cloud
Audit logs and configuration snapshots. Second wave.
-
OVHcloud
Audit logs, log files and configuration snapshots. Second wave.
-
Scaleway
Audit logs. Second wave.
-
Akamai
Audit logs. Later wave.
-
DigitalOcean
Audit logs and configuration snapshots. Later wave.
-
Fastly
Audit logs and configuration snapshots. Later wave.
-
Fly.io
Audit logs. Later wave.
-
Heroku
Audit logs. Later wave.
-
IBM Cloud
Audit logs. Later wave.
-
IONOS Cloud
Audit logs and configuration snapshots. Later wave.
-
Linode
Audit logs. Later wave.
-
Netlify
Audit logs and configuration snapshots. Later wave.
-
Oracle Cloud Infrastructure
Audit logs and configuration snapshots. Later wave.
-
Vercel
Audit logs and configuration snapshots. Later wave.
Containers, orchestration and infrastructure as code
Cluster audit, deployment and infrastructure-change evidence.
-
Amazon EKS
Audit logs. With the AWS connector.
-
Azure AKS
Audit logs. With the Microsoft Azure connector.
-
Google GKE
Audit logs. With the Google Cloud connector.
-
HCP Terraform
Audit logs and configuration snapshots. Second wave.
-
Kubernetes
Delivered events, log files and forwarded logs. Second wave.
-
Argo CD
Audit logs, delivered events and configuration snapshots. Later wave.
-
Docker Hub
Audit logs. Later wave.
-
Flux
Delivered events. Later wave.
-
Harbor
Audit logs and forwarded logs. Later wave.
-
JFrog Artifactory
Audit logs and forwarded logs. Later wave.
-
Pulumi Cloud
Audit logs. Later wave.
-
Red Hat OpenShift
Delivered events and forwarded logs. Later wave.
-
Sonatype Nexus
Audit logs and forwarded logs. Later wave.
-
Spacelift
Audit logs. Later wave.
Identity, SSO and directory
Who could sign in, who did, and what changed in the directory.
-
AWS IAM Identity Center
Configuration snapshots. With the AWS connector.
-
Google Workspace
Audit logs and configuration snapshots. First wave.
-
Microsoft Entra ID
Audit logs and configuration snapshots. First wave.
-
Okta
Audit logs, delivered events and configuration snapshots. First wave.
-
Auth0
Audit logs and delivered events. Second wave.
-
Duo Security
Audit logs and configuration snapshots. Second wave.
-
JumpCloud
Audit logs and configuration snapshots. Second wave.
-
Keycloak
Audit logs and delivered events. Second wave.
-
OneLogin
Audit logs and configuration snapshots. Second wave.
-
Tailscale
Audit logs, delivered events, log files and configuration snapshots. Second wave.
-
Teleport
Audit logs and configuration snapshots. Second wave.
-
BeyondTrust
Audit logs and forwarded logs. Later wave.
-
CyberArk
Audit logs. Later wave.
-
Delinea Secret Server
Audit logs and forwarded logs. Later wave.
-
Microsoft Active Directory
Forwarded logs. Later wave.
-
Netskope
Audit logs. Later wave.
-
Ping Identity
Audit logs and forwarded logs. Later wave.
-
StrongDM
Audit logs. Later wave.
-
Twingate
Audit logs. Later wave.
-
FreeIPA and LDAP
Forwarded logs. Through a receiver.
-
Zscaler
Forwarded logs. Through a receiver.
Password managers and secrets
Vault access and secret lifecycle events, never the secrets themselves.
-
AWS Secrets Manager and KMS
Configuration snapshots. With the AWS connector.
-
1Password Business
Audit logs and configuration snapshots. Second wave.
-
Azure Key Vault
Configuration snapshots. With the Microsoft Azure connector.
-
Bitwarden
Audit logs and configuration snapshots. Second wave.
-
Google Cloud Secret Manager and Cloud KMS
Audit logs. With the Google Cloud connector.
-
HashiCorp Vault
Forwarded logs and configuration snapshots. Second wave.
-
Dashlane Business
Audit logs. Later wave.
-
Doppler
Audit logs. Later wave.
-
Infisical
Audit logs. Later wave.
-
Keeper Security
Audit logs and forwarded logs. Later wave.
-
LastPass Business
Audit logs. Later wave.
HR, payroll and workforce
Joiners, movers and leavers, from the system of record for people.
-
BambooHR
Audit logs and configuration snapshots. First wave.
-
HiBob
Audit logs, delivered events and configuration snapshots. First wave.
-
Deel
Delivered events and configuration snapshots. Second wave.
-
Personio
Delivered events and configuration snapshots. Second wave.
-
Rippling
Audit logs and configuration snapshots. Second wave.
-
Workday
Audit logs, forwarded logs and configuration snapshots. Second wave.
-
ADP (Workforce Now)
Audit logs and configuration snapshots. Later wave.
-
Breathe HR
Configuration snapshots. Later wave.
-
CharlieHR
Configuration snapshots. Later wave.
-
Employment Hero
Configuration snapshots. Later wave.
-
Factorial
Delivered events and configuration snapshots. Later wave.
-
Gusto
Configuration snapshots. Later wave.
-
Oracle HCM
Forwarded logs and configuration snapshots. Later wave.
-
Remote.com
Delivered events and configuration snapshots. Later wave.
-
Sage HR
Configuration snapshots. Later wave.
-
Sage People
Configuration snapshots. Later wave.
-
SAP SuccessFactors
Audit logs and configuration snapshots. Later wave.
Code hosting, CI/CD and software supply chain
Who changed the code, who approved it, and what shipped.
-
GitHub
Audit logs, delivered events and configuration snapshots. First wave.
-
GitHub Actions
Audit logs and configuration snapshots. With the GitHub connector.
-
GitLab
Audit logs, delivered events and configuration snapshots. First wave.
-
GitLab CI
Audit logs. With the GitLab connector.
-
Azure DevOps
Audit logs, delivered events and configuration snapshots. Second wave.
-
Bitbucket Cloud
Audit logs, delivered events and configuration snapshots. Second wave.
-
GitHub Enterprise Server
Audit logs and forwarded logs. Second wave.
-
LaunchDarkly
Audit logs and configuration snapshots. Second wave.
-
Snyk
Audit logs and configuration snapshots. Second wave.
-
Bitbucket Data Center
Audit logs and forwarded logs. Later wave.
-
Buildkite
Audit logs and delivered events. Later wave.
-
CircleCI
Audit logs and configuration snapshots. Later wave.
-
Harness
Audit logs. Later wave.
-
Jenkins
Forwarded logs. Later wave.
-
Mend
Audit logs and configuration snapshots. Later wave.
-
Octopus Deploy
Audit logs and configuration snapshots. Later wave.
-
Sigstore and in-toto attestations
Delivered events and configuration snapshots. Later wave.
-
Socket
Audit logs and configuration snapshots. Later wave.
-
Sonatype Lifecycle
Audit logs and configuration snapshots. Later wave.
-
TeamCity
Audit logs. Later wave.
-
Forgejo
Delivered events and forwarded logs. Through a receiver.
-
Gitea
Delivered events and forwarded logs. Through a receiver.
-
Package registries
Audit logs. Through a receiver.
Endpoint, MDM and EDR
Device inventory, compliance state and detections.
-
CrowdStrike Falcon
Audit logs and configuration snapshots. Second wave.
-
Fleet (osquery)
Audit logs and configuration snapshots. Second wave.
-
Google Endpoint Management
Audit logs. With the Google Workspace connector.
-
Jamf Pro
Audit logs, delivered events and configuration snapshots. Second wave.
-
Kandji
Audit logs and configuration snapshots. Second wave.
-
Microsoft Defender for Endpoint and XDR
Audit logs and configuration snapshots. Second wave.
-
Microsoft Intune
Audit logs and configuration snapshots. Second wave.
-
SentinelOne
Audit logs and configuration snapshots. Second wave.
-
Addigy
Audit logs and configuration snapshots. Later wave.
-
Hexnode
Audit logs and configuration snapshots. Later wave.
-
Jamf Protect
Audit logs and forwarded logs. Later wave.
-
ManageEngine
Audit logs and configuration snapshots. Later wave.
-
Mosyle
Configuration snapshots. Later wave.
-
Omnissa Workspace ONE
Audit logs and configuration snapshots. Later wave.
-
Sophos Central
Audit logs. Later wave.
-
osquery
Forwarded logs. Through a receiver.
Productivity, collaboration and business SaaS
Administrative and access audit trails of the tools your company runs on.
-
Atlassian Cloud
Audit logs and configuration snapshots. First wave.
-
Microsoft 365
Audit logs and configuration snapshots. First wave.
-
Microsoft Teams
Audit logs. With the Microsoft 365 connector.
-
Asana
Audit logs and configuration snapshots. Second wave.
-
Box
Audit logs and configuration snapshots. Second wave.
-
DocuSign
Audit logs. Second wave.
-
Dropbox Business
Audit logs and configuration snapshots. Second wave.
-
Salesforce
Audit logs and configuration snapshots. Second wave.
-
Slack
Audit logs and configuration snapshots. Second wave.
-
Zendesk
Audit logs and configuration snapshots. Second wave.
-
Zoom
Audit logs and configuration snapshots. Second wave.
-
Adobe Acrobat Sign
Audit logs and delivered events. Later wave.
-
Adobe Admin Console
Audit logs. Later wave.
-
Airtable
Audit logs. Later wave.
-
ClickUp
Audit logs. Later wave.
-
Egnyte
Audit logs. Later wave.
-
Figma
Audit logs. Later wave.
-
Freshdesk
Audit logs. Later wave.
-
HubSpot
Audit logs and configuration snapshots. Later wave.
-
Intercom
Audit logs and configuration snapshots. Later wave.
-
Linear
Audit logs and delivered events. Later wave.
-
Miro
Audit logs. Later wave.
-
monday.com
Audit logs. Later wave.
-
Notion
Audit logs and configuration snapshots. Later wave.
-
ShareFile
Audit logs. Later wave.
-
Smartsheet
Audit logs. Later wave.
-
Trello
Audit logs. Later wave.
-
Canva
Audit logs. Through a receiver.
Databases, warehouses and data platforms
Who queried, changed or granted access to data. Collected by a collector you run, with field allow-lists.
-
Amazon Redshift
Log files. With the AWS connector.
-
Databricks
Audit logs and log files. Second wave.
-
Google BigQuery
Audit logs. With the Google Cloud connector.
-
MariaDB
Forwarded logs. Second wave.
-
MongoDB Atlas
Audit logs, log files and configuration snapshots. Second wave.
-
MySQL
Forwarded logs. Second wave.
-
PostgreSQL
Audit logs, forwarded logs and configuration snapshots. Second wave.
-
Snowflake
Audit logs. Second wave.
-
Azure Synapse and Microsoft Fabric
Audit logs. With the Microsoft Azure connector.
-
Change data capture (Debezium and Kafka Connect)
Forwarded logs. Later wave.
-
dbt Cloud
Audit logs. Later wave.
-
Elasticsearch
Forwarded logs. Later wave.
-
Microsoft SQL Server
Forwarded logs. Later wave.
-
OpenSearch
Forwarded logs. Later wave.
-
Oracle Database
Audit logs. Later wave.
-
Supabase
Audit logs and forwarded logs. Later wave.
-
Airbyte
Audit logs and delivered events. Through a receiver.
-
Fivetran
Audit logs and delivered events. Through a receiver.
-
Neon
Audit logs. Through a receiver.
-
PlanetScale
Audit logs. Through a receiver.
-
Turso
Audit logs. Through a receiver.
Payments, finance and accounting
Operational and administrative events from payment and finance systems. Never cardholder data.
-
Adyen
Audit logs and delivered events. Second wave.
-
GoCardless
Audit logs and delivered events. Second wave.
-
Paddle
Audit logs and delivered events. Second wave.
-
QuickBooks Online
Audit logs and configuration snapshots. Second wave.
-
Stripe
Audit logs, delivered events and configuration snapshots. Second wave.
-
Xero
Audit logs and configuration snapshots. Second wave.
-
Banking Circle
Audit logs and delivered events. Later wave.
-
Braintree
Audit logs and delivered events. Later wave.
-
Brex
Audit logs and configuration snapshots. Later wave.
-
Chargebee
Audit logs and delivered events. Later wave.
-
Checkout.com
Audit logs and delivered events. Later wave.
-
ClearBank
Audit logs and delivered events. Later wave.
-
Expensify
Audit logs and configuration snapshots. Later wave.
-
FreeAgent
Audit logs and configuration snapshots. Later wave.
-
Modulr
Audit logs and delivered events. Later wave.
-
Mollie
Audit logs and delivered events. Later wave.
-
NetSuite
Audit logs and configuration snapshots. Later wave.
-
Open Banking account information
Configuration snapshots. Later wave.
-
PayPal
Audit logs and delivered events. Later wave.
-
Pleo
Audit logs and configuration snapshots. Later wave.
-
Ramp
Audit logs and configuration snapshots. Later wave.
-
Recurly
Audit logs and delivered events. Later wave.
-
Sage Business Cloud
Audit logs. Later wave.
-
Sage Intacct
Audit logs. Later wave.
-
Soldo
Audit logs and configuration snapshots. Later wave.
-
Spendesk
Audit logs and configuration snapshots. Later wave.
-
Square
Audit logs and delivered events. Later wave.
-
Fiserv
Forwarded logs. Through a receiver.
-
Global Payments
Forwarded logs. Through a receiver.
-
Worldpay
Forwarded logs. Through a receiver.
ITSM, incident, change and on-call
Change approvals, incident timelines and on-call records.
-
Jira Service Management
Audit logs and configuration snapshots. With the Atlassian Cloud connector.
-
Jira Software
Audit logs. With the Atlassian Cloud connector.
-
PagerDuty
Audit logs and configuration snapshots. Second wave.
-
ServiceNow
Audit logs and configuration snapshots. Second wave.
-
FireHydrant
Audit logs. Later wave.
-
Freshservice
Audit logs. Later wave.
-
incident.io
Audit logs and delivered events. Later wave.
-
Instatus
Audit logs. Later wave.
-
Opsgenie
Audit logs. Later wave.
-
Rootly
Audit logs. Later wave.
-
Statuspage
Audit logs. Later wave.
AI platforms and model operations
Organisation audit logs, usage and model lifecycle events from AI platforms.
-
Anthropic
Audit logs. Second wave.
-
AWS Bedrock
Log files. With the AWS connector.
-
Azure OpenAI and Azure AI Foundry
Audit logs. With the Microsoft Azure connector.
-
Google Vertex AI
Log files. With the Google Cloud connector.
-
OpenAI
Audit logs and configuration snapshots. Second wave.
-
Databricks Mosaic AI and MLflow
Audit logs. Later wave.
-
Hugging Face (Enterprise Hub)
Audit logs and configuration snapshots. Later wave.
-
Mistral (La Plateforme)
Audit logs. Later wave.
-
Weights & Biases
Audit logs. Later wave.
-
Arize Phoenix
Forwarded logs. Through a receiver.
-
Langfuse
Forwarded logs. Through a receiver.
-
LangSmith
Forwarded logs. Through a receiver.
-
LiteLLM
Forwarded logs. Through a receiver.
-
Portkey
Forwarded logs. Through a receiver.
Security operations and observability
Audit trails and findings from the tools that watch everything else.
-
Curricula
Audit logs. Second wave.
-
Datadog
Audit logs and configuration snapshots. Second wave.
-
Hoxhunt
Audit logs. Second wave.
-
KnowBe4
Audit logs. Second wave.
-
Wiz
Audit logs and configuration snapshots. Second wave.
-
Elastic Security and Elastic Cloud
Audit logs and forwarded logs. Later wave.
-
Grafana Cloud
Audit logs and forwarded logs. Later wave.
-
Lacework
Audit logs. Later wave.
-
Microsoft Sentinel and Log Analytics
Audit logs. With the Microsoft Azure connector.
-
Mimecast
Audit logs. Later wave.
-
New Relic
Audit logs and forwarded logs. Later wave.
-
Orca Security
Audit logs. Later wave.
-
Prisma Cloud
Audit logs. Later wave.
-
Proofpoint
Audit logs. Later wave.
-
Qualys
Audit logs. Later wave.
-
Rapid7
Audit logs. Later wave.
-
Sumo Logic
Audit logs and forwarded logs. Later wave.
-
Tenable
Audit logs. Later wave.
-
Splunk
Audit logs and forwarded logs. Through a receiver.
Network and perimeter
Firewall, VPN and network configuration changes.
-
Cisco Meraki
Audit logs. Second wave.
-
DNS providers
Configuration snapshots. Later wave.
-
Fortinet FortiGate
Audit logs and forwarded logs. Later wave.
-
Palo Alto Networks
Audit logs and forwarded logs. Later wave.
-
Cisco ASA, Firepower and ISE
Forwarded logs. Through a receiver.
-
HPE Aruba
Audit logs and forwarded logs. Through a receiver.
-
Juniper
Audit logs and forwarded logs. Through a receiver.
-
OpenVPN
Forwarded logs. Through a receiver.
-
Ubiquiti UniFi
Audit logs and forwarded logs. Through a receiver.
-
WireGuard
Forwarded logs. Through a receiver.
Physical security and facilities
Door access events and visitor records.
-
Avigilon Alta
Audit logs. Later wave.
-
Brivo
Audit logs. Later wave.
-
Envoy
Audit logs. Later wave.
-
Kisi
Audit logs and configuration snapshots. Later wave.
-
Proxyclick
Audit logs. Later wave.
-
Salto KS
Audit logs. Later wave.
-
Verkada
Audit logs and configuration snapshots. Later wave.
-
Colocation access reports
Delivered events. Through a receiver.
-
Paxton Net2 and Paxton10
Forwarded logs. Through a receiver.
Backup, resilience and business continuity
Backup and restore job evidence, and restore-test attestations.
-
AWS Backup
Audit logs and configuration snapshots. With the AWS connector.
-
Restore-test attestations
Delivered events. Second wave.
-
Azure Backup
Audit logs. With the Microsoft Azure connector.
-
Cohesity
Audit logs and configuration snapshots. Later wave.
-
Druva
Audit logs and configuration snapshots. Later wave.
-
Google Cloud Backup and DR
Audit logs. With the Google Cloud connector.
-
Rubrik
Audit logs and configuration snapshots. Later wave.
-
Veeam
Audit logs and forwarded logs. Later wave.
-
Backblaze B2
Audit logs. Through a receiver.
-
Wasabi
Audit logs. Through a receiver.
Communications and telephony
Account and configuration audit trails of communication platforms.
-
Twilio
Audit logs. Later wave.
-
8x8
Audit logs. Through a receiver.
-
Aircall
Audit logs. Through a receiver.
-
Bird (MessageBird)
Audit logs. Through a receiver.
-
Mailgun
Audit logs. Through a receiver.
-
Postmark
Audit logs. Through a receiver.
-
RingCentral
Audit logs. Through a receiver.
-
SendGrid
Audit logs. Through a receiver.
-
Sinch
Audit logs. Through a receiver.
-
Vonage
Audit logs. Through a receiver.
Application frameworks
Forward the audit trail your application already keeps, through a small open-source bridge for its framework.
-
Laravel
Audit logs. First wave.
-
Django
Audit logs. Second wave.
-
Go
Audit logs. Second wave.
-
Node.js and TypeScript
Audit logs. Second wave.
-
Ruby on Rails
Audit logs. Second wave.
-
Symfony
Audit logs. Second wave.
-
.NET
Audit logs. Later wave.
-
Elixir
Audit logs. Later wave.
-
Java and Kotlin
Audit logs. Later wave.
Receivers and the API
The paths that take any source: point an existing forwarder at Sigilbase, or send events yourself.
-
Events API and SDKs
Audit logs. Available now.
-
OpenTelemetry (OTLP)
Delivered events. Available now.
-
HTTPS JSON and NDJSON receiver
Delivered events. First wave.
-
Manual and attested uploads
Log files. First wave.
-
Signed webhooks
Delivered events. First wave.
-
Splunk HEC-compatible endpoint
Delivered events. First wave.
-
File tail and journald
Forwarded logs. Second wave.
-
Kafka, Redpanda, NATS, Pub/Sub, Event Hubs and Kinesis
Audit logs. Second wave.
-
Object storage drops
Log files. Second wave.
-
Syslog
Audit logs and delivered events. Second wave.
Not on the list?
The list is where connectors are going, not the limit of what can be sealed. Anything that can make an HTTP request writes to the events API today, and OpenTelemetry exporters already send to the OTLP endpoint. Receivers for what existing forwarders emit, HTTPS, syslog, a Splunk HTTP Event Collector, a bucket, are in the first waves.
Tell us what you run and it goes on the list with a status, like everything else here.
What stays the same
- The record kept as the source gave it, with its hash
- A receipt for every collection
- A declared gap for every interval nothing covers
- A daily settlement once late records can no longer arrive
- Evidence verified offline, without an account
Start recording provable history
Chained, sealed, independently verifiable audit logs, from the first event. Free while Sigilbase is in beta.
Questions first? Write to hello@sigilbase.io.