Connect your stack.
Start detecting in minutes.

Vimy integrates with the tools you already use. Each connector feeds security telemetry into the platform and simultaneously maps to compliance controls. No rip-and-replace โ€” Vimy is the brain that sits on top.

Native connectors One-click setup 100% Canadian processing
How It Works

One connector. Three outcomes.

Every connector you add delivers security telemetry, activates detections, and collects compliance evidence โ€” simultaneously.

Security telemetry

Every connector feeds raw events into Vimy's telemetry pipeline. Events are normalized to OCSF, enriched with threat intelligence and entity context, and made queryable in seconds.

Detection fuel

Normalized events flow to the detection engine. Each connector activates detection specifications specific to that data source โ€” the more connectors, the more coverage.

Compliance evidence

Every event that passes through the pipeline automatically maps to compliance controls across your active frameworks. Connect Cloudflare, and perimeter-related SOC 2 controls start collecting evidence immediately.

Live Now

Production-ready connectors.

These connectors are live, tested, and actively processing telemetry for Vimy customers today.

Live Perimeter Battery

Cloudflare

Ingests WAF events, DNS analytics, audit logs, and Logpush data. Powers the Perimeter battery with DDoS detection, WAF bypass attempts, origin exposure monitoring, DNS hijack detection, and bot attack identification.

Data Feeds
WAF Events DNS Analytics Audit Logs Logpush
Detections Enabled
DDoS patterns WAF bypass Origin IP exposure DNS hijack Bot swarm SSL downgrade
Setup: API token ยท ~5 minutes
Live Identity Battery

Google Workspace

Ingests Admin SDK audit events, login activity, OAuth grant events, and directory changes. Powers the Identity battery with impossible travel detection, MFA fatigue monitoring, OAuth abuse detection, and privilege escalation tracking.

Data Feeds
Admin Audit Login Events OAuth Grants Directory Changes
Detections Enabled
Impossible travel MFA fatigue OAuth abuse Privilege escalation Credential stuffing Session hijack
Setup: OAuth connection ยท ~10 minutes
Live Infrastructure Battery

Canadian cloud infrastructure

Ingests cloud server events, firewall changes, API audit logs, and cloud resource modifications. Powers the Infrastructure battery with unauthorized access detection, firewall tampering alerts, and resource anomaly monitoring.

Data Feeds
Cloud Server Events Firewall Audit API Logs Resource Changes
Detections Enabled
Unauthorized SSH Firewall tampering Backup deletion API key abuse Resource anomalies
Setup: API token ยท ~5 minutes
Endpoint Agent

The Vimy Agent โ€” your eyes on every server.

Live Infrastructure Battery Quantum Battery

Vimy Agent

A lightweight Go binary deployed on your servers. Runs in user space with zero kernel access. Observes authentication events, process execution, file integrity, network connections, resource utilization, and cryptographic inventory. All analysis happens server-side โ€” the agent watches, the platform thinks.

Data Feeds
Auth Events Process Exec File Integrity Network Connections Resource Monitoring Crypto Scan

Setup: One-line install script ยท ~2 minutes per server

Managed from the Agent Fleet page โ€” deploy, update, and monitor agents across your entire infrastructure from a single dashboard.

In Development

Expanding continuously.

These connectors are defined in the platform and will be activated as each battery reaches production. Request early access to prioritize a specific connector for your environment.

Okta

Identity Battery

System log events, authentication, MFA, user lifecycle

Entra ID

Identity Battery

Sign-in logs, audit logs, conditional access, directory changes

Gmail (Advanced)

Email Battery

Message metadata, phishing indicators, forwarding rules, DMARC/SPF/DKIM

Microsoft 365 Mail

Email Battery

Mail flow, message trace, transport rules, threat protection

CrowdStrike Falcon

Endpoint Battery

EDR events, device compliance, threat detections, process activity

SentinelOne

Endpoint Battery

Threat events, agent status, device inventory, deep visibility

Microsoft Defender

Endpoint Battery

ATP alerts, device health, vulnerability assessments

AWS

Infrastructure Battery

CloudTrail, GuardDuty, Security Hub, IAM events

Azure

Infrastructure Battery

Activity logs, Security Center, resource changes

FortiGate

Network Battery

Firewall logs, VPN events, IPS alerts, traffic analysis

Palo Alto

Network Battery

Firewall logs, threat prevention, URL filtering, WildFire

Slack

SaaS Battery

Audit logs, file sharing, integration activity, user events

GitHub

SaaS Battery

Audit log, secret scanning, repository events, OAuth apps

Salesforce

SaaS Battery

Login history, setup audit trail, event monitoring

Jira

SaaS Battery

Project events, permission changes, integration activity

ServiceNow

SaaS Battery

Incident management, change records, CMDB updates

PagerDuty

Alerting

Incident routing, escalation, on-call management

Intune / Jamf

Endpoint Battery

Device compliance, configuration profiles, app management

Your stack, connected on day one.

All batteries

Vimy connectors are read-only and agent-optional. No firewall changes, no persistent credentials stored in plaintext โ€” each connector authenticates via OAuth or API token scoped to the minimum required permissions. New connectors are added without redeployment and activate automatically for the batteries that need them.

Read-only
No write access required
<5 min
Average connector setup time
+11
Security batteries fed
Zero
Firewall changes needed
Coverage

More connectors. More coverage. More evidence.

Every connector you activate increases your detection coverage and your compliance posture simultaneously. Vimy's Fog of War page shows you exactly which MITRE ATT&CK techniques you cover and which you don't โ€” so you can make informed decisions about which connectors to add next.

Connect a tool
Detection specs activate
Compliance controls light up

Your Fog of War coverage score improves with every new connector.

See which connectors
match your stack.

30-minute demo. We'll map your existing tools to Vimy's batteries and show you what lights up on day one.

One-click setup No rip-and-replace 100% Canadian processing