Jump to a page or a control
Read-only collectors, inside the bank
11 tools and document upload. The first five run live; the rest arrive in pilots. Collectors pull on a schedule, or on demand below.
Falcon
CrowdStrikeLiveSensor coverage, prevention policies, Spotlight vulnerabilities
OAuth2 client credentials · Hosts, Prevention policies, Vulnerabilities: READ
Entra ID
MicrosoftLiveConditional Access, MFA registration, privileged roles
App registration · Policy.Read.All, AuditLog.Read.All (application)
Active Directory
MicrosoftLivePassword policy, privileged groups, computer objects
LDAPS · group-managed service account, read-only
Enterprise
SplunkLiveIndex retention, source coverage, correlation rules
Bearer token · role scoped to named indexes
Vulnerability Management
TenableLiveFindings, remediation age, scan cadence
API keys · per-user, read-only
Defender and Intune
MicrosoftPilotDevice compliance, disk encryption, secure score
Graph alerts_v2 · DeviceManagementManagedDevices.Read.All
Panorama
Palo Alto NetworksPilotSecurity rules, commits, egress destinations
XML API key · read-only admin role
Privilege Cloud
CyberArkPilotPrivileged accounts, safes, session recording
Identity service user · never retrieves secrets
ITSM
ServiceNowPilotChange records, incidents, CMDB
OAuth · table ACLs on change_request, incident, cmdb_ci
Security Cloud
RubrikPilotBackup success, immutability, restore tests
Service account · read-only
Fraud management system
Core bankingPilotAFASA rules, authentication factors, transaction logs
Reporting API · read-only
Document
UploadedLiveBoard minutes, policies, reports no tool holds
Hashed on upload · uploader and date recorded
What every connector must do before it is allowed into a bank.
Powered by Mesh API