Virtum

Integrations

Built to connect to anything.

Every system Virtum connects to is described as data: what it is, how it can be reached, and what Virtum can observe and do there. Adding the next system means describing it, not building a new product. It can be browsed and observed straight away, and control switches on once its actions are in place.

Six ways to connect

As much reach as you choose.

System by system, from full control to an inventory entry with no access at all.

  • Direct API

    Virtum calls the system's own API with credentials held in its vault.

  • Virtum agent

    A lightweight agent on the device carries out approved actions locally.

  • On-site runner

    A runner inside your network executes approved actions, so nothing opens inbound.

  • Your own MCP endpoint

    Point Virtum at an MCP server you host; its tools become Virtum capabilities.

  • Snapshot upload

    Send an encrypted snapshot for offline analysis. Observe only, by design.

  • Metadata only

    Track a system in the inventory without any access to it.

The same rules for everything

One set of approvals. One audit trail. Every system.

  • An approval queue before anything changes
  • A risk rating and a preview of every change
  • Credentials kept in the vault, scoped and rotated with approval
  • Every action on the audit trail
  • Strict separation between customers
  • The assistant can use it, through the same approvals

What it covers

13 categories, and counting.

  • Hypervisors
  • Orchestrators
  • Container runtimes
  • Operating systems
  • Identity
  • Source control
  • CI/CD
  • Application frameworks
  • Security tooling
  • Clouds
  • Infrastructure as code
  • Configuration management
  • Networking

In the catalogue today

92 named systems, frameworks and providers.

The catalogue as it stands today. It grows as customers need it.

Clouds · 3

  • Amazon Web Services
  • Microsoft Azure
  • Google Cloud

Servers, virtualisation and containers · 8

  • Proxmox VE
  • VMware vSphere
  • Kubernetes
  • Argo CD
  • Docker
  • Windows
  • Ubuntu and Linux
  • FreeBSD

Networking · 4

  • pfSense
  • MikroTik RouterOS
  • UniFi
  • Amazon Route 53

Infrastructure as code · 2

  • Terraform / OpenTofu
  • Ansible

Source control and CI · 7

  • GitHub and GitHub Actions
  • GitLab
  • Bitbucket
  • Azure DevOps
  • Gitea / Forgejo
  • Jenkins
  • Any git host

Identity and directories · 6

  • Microsoft Entra ID
  • Microsoft 365
  • Keycloak
  • Google Workspace
  • AWS IAM
  • Intune

Security scanners · 13

  • Trivy
  • Grype
  • OSV-Scanner
  • Semgrep
  • Gitleaks
  • Checkov
  • Kubescape
  • Lynis
  • Nikto
  • Nmap
  • Nuclei
  • Greenbone / OpenVAS
  • Any SARIF or generic scanner

Advisory feeds · 5

  • NVD
  • OSV
  • GitHub Security Advisories
  • CISA KEV
  • FIRST EPSS

Compliance frameworks · 19

  • Cyber Essentials
  • Cyber Essentials Plus
  • ISO/IEC 27001
  • SOC 2
  • CIS Controls v8
  • NIST CSF 2.0
  • NIST 800-53 (StateRAMP)
  • PCI DSS
  • HIPAA
  • UK GDPR
  • NCSC CAF
  • Essential Eight
  • CJIS
  • SOX ITGC / FFIEC / GLBA
  • NERC CIP
  • FCC CPNI
  • EU AI Act
  • ISO/IEC 42001
  • NIST AI RMF

AI models · 6

  • Anthropic Claude
  • OpenAI
  • Google Gemini
  • Azure OpenAI
  • Mistral
  • Local models

AI coding agents · 3

  • Claude Code
  • OpenAI Codex
  • Virtum's own coder

Knowledge imports · 3

  • Confluence
  • Notion
  • SharePoint

Microsoft 365 · 4

  • Microsoft Defender
  • Exchange Online
  • Microsoft 365 Backup
  • Microsoft Teams Phone

Advertising · 3

  • Google Ads
  • Microsoft Ads
  • Meta

Telephony · 1

  • Telnyx

Password managers · 1

  • Bitwarden

Sign-in · 4

  • Microsoft
  • Google
  • GitHub
  • Any OIDC provider
Need a system connected? Tell us