The client's security stack,
emulated end to end.
Vendor-faithful mock APIs for 23 security tools, wrapped in an adapter platform: credentialed connections, scheduled discovery, a session-reusing gateway, and a correlated asset inventory. Build and break agent workflows safely — before they ever touch a client environment.
The full adapter loop, from credentials to correlated assets
Add a credentialed connection per tool. A real API key is provisioned behind it — auth is enforced, not painted on.
Heartbeats probe each vendor mock through the gateway. Status reflects what actually answered.
Scheduled fetches pull inventory through one session-reusing endpoint, with per-run history.
Records from different tools merge into single assets — the matching rule is recorded on every source.
Revoke credentials, force outages, inject latency. Watch lifecycle, fetch history and freshness respond.
Built like the platforms it stands in for
The emulator mirrors how real asset platforms integrate with security tools — 15 adapters run scheduled discovery against a shared, deterministic fleet, so cross-tool correlation genuinely works.
CrowdStrike, Qualys, Entra, Zscaler and more — real API shapes with deterministic, seeded responses. Same input, same answer, every time.
A single endpoint per connection injects each vendor's auth scheme and reuses live sessions. Issued-vs-reused counters are visible, not implied.
Connections move through pending, connected, degraded and error based on real probe outcomes, with a full event trail.
Devices merge on serial, MAC, then hostname; users on email. Every merged source keeps the rule that matched it and the raw evidence.
Per-connection faults (revoked credentials, outage, slowness) and per-tool scenarios (latency, error rates, forced statuses) make chaos testing a first-class feature.
Domain events publish to subscribers with HMAC signatures; scheduled generators keep the environment alive without anyone touching it.
Ready to point an agent at it?
Sign in, add a connection, run a discovery, and query the correlated inventory — the whole loop takes about two minutes.