AppsSecurity & Compliance

Integrations

Security integrations: identity providers, authenticators, models and APIs

Autessa Security & Compliance connects to the identity providers your team already uses (Google Workspace and Microsoft Entra ID), standard authenticator apps, the AI model providers you bring keys for, and any HTTPS API your tools call with a stored secret.

Start free

Identity providers

Google Workspace →

Company single sign-on, and Continue with Google for members and Custom Auth app visitors.

Microsoft Entra ID →

Company single sign-on, and Continue with Microsoft for members and Custom Auth app visitors.

Sign in with Apple →

A member sign-in option.

Your DNS provider →

Prove you own an email domain with a DNS record before requiring SSO.

Authenticator apps

Google Authenticator, Microsoft Authenticator, 1Password →

Any standard authenticator app for two-step verification and for proving who you are to an AI agent.

Model providers (bring your own key)

OpenAI, Anthropic, Google Gemini, Azure OpenAI →

Keys encrypted with your company key, write-only. PII and PHI stripping applies to them too.

xAI, Perplexity, OpenRouter, Groq, Mistral, DeepSeek, Together AI, Fireworks AI →

Plus any OpenAI-compatible service at an https base URL on the public internet.

Third-party APIs through Secrets

Any HTTPS API →

Tools call services like Stripe, GitHub or Shopify with a secret sent only to its allowed hosts, verify HMAC-SHA256 webhook signatures and sign HS256 JWTs.

Autessa developer surfaces

Autessa CLI →

secrets, evidence, trigger-history, autessadb roles and access-log commands; SSO and credential minting listed but kept in the browser.

Client API and Poweruser API →

Scoped API keys, poweruser keys and OAuth clients.

AutessaScript SDK →

secrets.ref, verifyHmacSha256, signJwtHs256, getSharingDetails and share, and AutessaDB roles.

For developers

Use a third-party key without holding it

From the secrets helper docs: the script holds a handle, and the value is filled in only inside the HTTPS request to an allowed host.

script tooljavascript
const key = secrets.ref("acme-api-key");
const res = JSON.parse(api.get(JSON.stringify({
endpoint: "https://api.acme.com/v1/me",
headers: { "Authorization": "Bearer " + key }
})));

Works with these Autessa products

Connect your identity provider in minutes

Pick Google or Microsoft, verify your domain, require SSO.

Start free

Reports, policies and questionnaires live on the Autessa Trust Center.

100% customizable, code and all

Make Autessa Security & Compliance fully your own.

Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.

Start free and make it yours