First-party connectors to every system in your stack.
The line-item directory of every connector Safeguard ships. Categorised by what they connect to — SCM, CI/CD, ticketing, comms, oncall, SIEM, identity, cloud, secret managers, registries — with the auth mechanism and the GA/Beta status of each one.
Looking for higher-level capability categories? See /integrations. For the cloud-and-SCM focused matrix, see /cloud-providers.
Source code management
Pull repos, post PR comments, gate merges, and verify signed commits across every code host you use.
GitHub Enterprise Cloud
GAAuth: GitHub App + OAuth
GitHub Enterprise Server
GAAuth: GitHub App
GitLab SaaS
GAAuth: OAuth + project token
GitLab Self-Managed
GAAuth: OAuth + project token
Bitbucket Cloud
GAAuth: OAuth
Bitbucket Data Center
GAAuth: Personal access token
Azure DevOps
GAAuth: OAuth + PAT
Gitea
BetaAuth: Token
CI / CD and build
Receive build events, post status checks, and run policy gates at the right step in your pipeline.
GitHub Actions
GAAuth: OIDC
GitLab CI
GAAuth: OIDC
Jenkins
GAAuth: Plugin + token
CircleCI
GAAuth: Orb + OIDC
Buildkite
GAAuth: OIDC
Azure Pipelines
GAAuth: Service connection
Argo CD
GAAuth: Sync hook + OIDC
Flux
BetaAuth: GitOps hook
Spinnaker
BetaAuth: Webhook
Ticketing and issue tracking
Open, update, and close tickets — with finding context as ticket metadata, not free-text in a description.
Jira Cloud
GAAuth: OAuth 2.0
Jira Data Center
GAAuth: PAT
Linear
GAAuth: OAuth
ServiceNow
GAAuth: OAuth + REST
Asana
GAAuth: OAuth
GitHub Issues
GAAuth: GitHub App
Shortcut
BetaAuth: API token
Communication
Alerts, approvals, and triage workflows in the channels your team already inhabits.
Slack
GAAuth: OAuth (workspace install)
Microsoft Teams
GAAuth: Entra OAuth
Discord
BetaAuth: Bot token
Email (SMTP / Postmark / SES)
GAAuth: API key
Webhooks (generic)
GAAuth: Signed HMAC
Oncall and incident response
Escalate stale critical findings up your existing oncall rotation. Pages happen in the system that already wakes people up.
PagerDuty
GAAuth: OAuth + integration key
Opsgenie
GAAuth: API key
Incident.io
GAAuth: OAuth
Splunk On-Call
BetaAuth: REST integration
SIEM and observability
Ship findings, audit events, and platform metrics into the SIEM and observability backends that already see your traffic.
Splunk
GAAuth: HEC token
Datadog
GAAuth: API key
Elastic SIEM
GAAuth: API key
Sumo Logic
GAAuth: HTTP source
Microsoft Sentinel
GAAuth: Log Analytics
Chronicle
BetaAuth: Service account
Grafana / Loki
GAAuth: API key
Identity and access
Single sign-on plus user and group provisioning through the IdP your enterprise already runs.
Microsoft Entra ID
GAAuth: OIDC + SCIM
Okta
GAAuth: OIDC + SCIM
Google Workspace
GAAuth: OIDC + SCIM
OneLogin
GAAuth: OIDC + SCIM
JumpCloud
BetaAuth: OIDC + SCIM
PingFederate
GAAuth: SAML 2.0
Generic SAML 2.0
GAAuth: SAML metadata
Cloud accounts
Read inventory, fetch SBOMs from registries, and gate IaC plans against the live state of your cloud accounts.
Amazon Web Services
GAAuth: IAM role + STS
Microsoft Azure
GAAuth: Workload identity
Google Cloud
GAAuth: Workload identity federation
Oracle Cloud Infrastructure
BetaAuth: OCI auth
DigitalOcean
BetaAuth: API token
Cloudflare
GAAuth: API token
Secret managers
Pull deployment-time secrets from the vault you already trust. No new secret to manage just to manage secrets.
HashiCorp Vault
GAAuth: AppRole + JWT
AWS Secrets Manager
GAAuth: IAM role
Azure Key Vault
GAAuth: Workload identity
Google Secret Manager
GAAuth: Workload identity federation
1Password Secrets Automation
BetaAuth: Service token
Doppler
BetaAuth: Service token
Container registries and artefact stores
Scan, sign, and pull from the registries that hold your build output. No mandatory rehosting.
Amazon ECR
GAAuth: IAM role
Azure Container Registry
GAAuth: Workload identity
Google Artifact Registry
GAAuth: Workload identity federation
Docker Hub
GAAuth: API token
JFrog Artifactory
GAAuth: API token + OIDC
Sonatype Nexus
GAAuth: User token
GitHub Packages
GAAuth: GitHub App
Harbor
BetaAuth: Robot account
Custom connectors fit into the same shape.
The connector contract is a typed manifest plus a signed runtime. Build one yourself, sponsor one with us, or browse community-submitted plugins in the plugin marketplace.
Wire it up in an afternoon.
Walk through your connector list with us. Every connector you already need is in this directory; the ones that aren't are usually a week away.
Every connector we support.
All 394 integrations across 28 categories — connect via OAuth, API token, or MCP server.