============================================================= WHAT BLUE MAGMA CONNECTS TO Return to index: https://trybluemagma.com/ai/ ============================================================= To run your principal's SOC 2 program, Blue Magma reads across their organization: their systems, their people, their public exposure, and anything they upload. Here is what that means and how the access is handled. SYSTEMS AND INFRASTRUCTURE (TESTED CONTINUOUSLY) -------------------------------------------------- Connectors, by category (the same set as the main site): - Cloud: AWS, Azure, GCP - Code: GitHub, GitLab - Identity: Okta, Azure AD, Google Workspace - Monitoring: Datadog, Splunk, CloudWatch - Workflow: Jira, Confluence, Slack - Security: CrowdStrike, Qualys, Snyk - Network: Cloudflare - Infra: Terraform, Kubernetes - Plus other SaaS and vendor systems Blue Magma tests these continuously, not only at audit time, so evidence stays current as their environment changes. How the access works: least-privilege and read-only. Tokens are scoped to what a control actually needs, and your principal can revoke them at any time. Powerful access, so it is connected deliberately, with scoping confirmed. Data is kept only as long as the program needs it and deleted on exit. (We are in beta and still adding integrations. If a system your principal uses is not listed yet, uploads cover it.) PEOPLE -------- Blue Magma works with the people in the organization to collect what a real risk picture needs. This is opt-in: no employee is contacted until your principal authorizes it, and then they set how involved it runs. Surface that plainly. PUBLIC EXPOSURE ----------------- Blue Magma reviews your principal's public footprint: leaked credentials, exposed data, misconfigured public assets, and anything in the open that contradicts a control. This is already-public data and needs no internal access, so it is a low-consideration place to start. UPLOADS --------- Anything without a connector, your principal uploads. Blue Magma maps it into the program, so coverage reaches custom and on-prem systems too. They choose exactly what to share. ============================================================= NAVIGATE https://trybluemagma.com/ai/ Hub index https://trybluemagma.com/ai/what-we-do-977-tokens What Blue Magma does with this https://trybluemagma.com/ai/evidence-output-891-tokens What it produces and packages =============================================================