Certified Connectors

What is a certified KHEPRA connector? Signed, scoped, proven.

Every connector comes signed, with a clear list of what it can touch, and proof for every call it makes.

Short answer

A certified KHEPRA connector links your tools to KHEPRA safely, with no code changes. It ships signed by its maker, spells out exactly what it can touch, and creates a signed proof record with what went in, what came out, and why it was allowed, on every single call.

By Yao Nouchi, Founder & Principal Engineer, SecRed Knowledge Inc.U.S. Army veteran · Active DoD Secret clearance · CMMC & STIG practitionerLast updated August 2026
Signed manifests

Every connector version is signed by its maker. Anyone can check it.

Capability scopes

Each connector spells out exactly what it can touch and what it can do.

Proof on every call

Every single call creates a signed record with what went in, what came out, and why it was allowed.

Connector catalog

Which tools have a certified connector today?

Cloud & Infrastructure

AWS
IAM · S3 · CloudTrail
GA
Azure
Entra · Storage · Monitor
GA
GCP
IAM · GCS · Audit Logs
Beta
Kubernetes
RBAC · Admission · Events
Beta
HashiCorp Vault
Secrets · Audit
Beta
Cloudflare
Zero Trust · Logs
Preview

Identity & Endpoint

Okta
Users · Groups · System Log
GA
Entra ID
Users · Conditional Access
GA
CrowdStrike
Falcon · Detections
Beta
Jamf
Devices · Compliance
Beta
1Password
Vault · Events
Alpha

Data & Analytics

Snowflake
Warehouses · Access History
GA
Databricks
Unity · Audit
Beta
BigQuery
Datasets · Audit
Beta
PostgreSQL
Roles · pgaudit
GA
Kafka
ACLs · Topics
Alpha

Model Providers

OpenAI
Chat · Tools · Files
GA
Anthropic
Messages · Tools
GA
Google Vertex
Gemini · Grounding
Beta
Mistral
Chat · Embeddings
Beta
Cohere
Command · Rerank
Alpha

Workflow & Ticketing

GitHub
Repos · Audit · Actions
GA
Jira
Issues · Workflows
Beta
ServiceNow
ITSM · GRC
Beta
Slack
Messages · Audit
GA
Notion
Pages · Audit
Preview

SIEM, GRC & Observability

Splunk
HEC · Search
GA
Datadog
Logs · Traces
GA
Chronicle
Ingest · Detect
Beta
Vanta
Evidence sync
Beta
Drata
Evidence sync
Beta

Questions people ask before they buy

What is a certified KHEPRA connector?

A certified connector links your tools to KHEPRA safely. It comes signed by its maker, spells out exactly what it can touch, and creates a signed proof record for every single call it makes.

Do I need to change my code to use a connector?

No. Your systems join the trust network with no code changes. You install the certified connector and it starts producing signed proof on every call.

What does a connector's capability scope mean?

Each connector spells out exactly what it can touch and what it can do, before you install it. There's no hidden or open-ended access.

Which tools have certified connectors today?

Cloud and infrastructure, identity and endpoint, data and analytics, model providers, workflow and ticketing, and SIEM/GRC tools. Each connector is listed with its status: GA, Beta, Alpha, or Preview.

Can I build my own certified connector?

Yes. Use the connector SDK to publish signed, scoped integrations to the KHEPRA Marketplace so other teams can install and trust them too.

How do I build my own certified connector?

Use the connector SDK to publish signed, scoped integrations to the KHEPRA Marketplace.

Last updated August 2026

Read the SDK