Platform · Integrations
What Cygrid connects to
01
Identity providers
Entra ID · Google Workspace · JumpCloud · Okta
The source of truth for who people are. Cygrid reads users, groups and joiner, mover and leaver events, and enforces deprovisioning across every connected app.
02
SaaS
Salesforce · HubSpot · Slack · Microsoft 365
Finds every account, role, OAuth grant and token, flags dormant and over-privileged access, and, on your approval, revokes or narrows it through each app’s own API.
03
Code and CI/CD
GitHub · GitLab · Bitbucket
Maps who and what can push, merge and read secrets, from developers to bots and pipeline tokens, and removes access nobody uses.
04
Cloud
AWS · GCP · Azure
Brings IAM roles, service accounts and keys into the same graph, so cloud entitlements are scored next to the people and agents that use them.
05
AI layer
Claude · Copilot · MCP servers
Discovers AI apps and agents, what data they can reach and on whose behalf, and enforces policy on every agent tool call through the MCP Gateway.
06
Data and analytics
Snowflake · Databricks · Metabase
Shows who can query sensitive data, including service accounts and AI agents, so data access is reviewed and right-sized like any other permission.
07
People and ownership
Workday · Personio · HiBob
Adds the org chart, managers and employment status, so every identity has an accountable owner and leavers lose access on their last day.
08
Security feeds
CrowdStrike · Wiz · Datadog
Ingests findings and signals from the tools you already run, adding context to every risk score rather than replacing them.
Getting connected
Read-only first. Enforcement when you decide.
Cygrid connects and builds your Identity Intelligence Graph in minutes, and enforces from day one.
STEP 1
Connect
Your identity provider and core SaaS apps, through secure native integrations.
STEP 2
See the graph
Every identity, what it can do, and your top risks ranked by business impact.
STEP 3
Enforce
Turn on your first policy at the enforcement point that matters most to you.
Start with a read-only connection to your identity provider and core SaaS apps.