Integrations

    Connect a cloud account to start monitoring.

    No Integrations yet

    Add an integration to start monitoring identity posture, risk and compliance across your cloud.

    + Add an integration
    ← Integrations

    Pick an integration to continue

    ← Pick an integration

    Amazon Web Services

    Read-only

    Connect an AWS account

    Enter your AWS account ID, validate it, then give arch0 a read-only role. arch0 reads permissions and never stores credentials.

      Trouble getting started?

      Here's each step, as it looks in the AWS console.

      Read the guide
      1. Sign in to the AWS console as an admin of the account you want to connect.
      2. Open the account menu, top right, and copy the 12-digit account ID into step 1.
      3. In step 3, open the role template. CloudFormation opens with the External ID filled in.
      4. Create the stack. When it finishes, copy RoleArn from the Outputs tab into step 3.

      What arch0 can see

      The role reads configuration and activity logs. It can't change, create or delete anything in your account, and you can remove it at any time.

      ← Pick an integration

      GitHub

      Read-only

      Connect a GitHub organization

      Install the arch0 GitHub App, choose the repositories it can read, then confirm. arch0 never writes to your code.

        What arch0 can see

        Members, teams, deploy keys, branch protection rules and the organization audit log. It can't push code, merge pull requests or change settings.

        Already connected

        org/arch0 has 14 identities in arch0. Connect another organization to add its members, apps and keys.

        Dashboard

        Resource category

        Tile size shows how many resources each category holds. Choose one to see its risks.

        Identity posture

        Identities →

        Compliance

        Risk

        Every check across your connected accounts, by region. Failing checks come first.
        ← Risk

        Individual Risk

        Activity Feed

        Cloud and GitHub actions across arch0 Production, newest first.

        Identities

        Every person, role and app that can act in your connected accounts, by its worst finding.
        ← Identities

        Identity

        Workspace settings

        arch0 Production

        Compliance

        Pass rates for every framework you track, checked against your cloud's live configuration.

        Active frameworks

        Controls

        Last audit 2h ago

        All frameworks

        Switch a framework on to check your cloud against it.

        Integrations

        arch0 Production · 2 connected
        + Add integration

        Connected

        Risk shows each source's findings by severity.

        Alerts and tickets

        Send findings to the tools your team already uses.

        Plugins

        Extra views on top of your connected sources.

        More sources

        Each new source adds its identities to the feed, Risk and Compliance.

        Evidence and logs

        Send checks and activity to your audit and logging tools.
        arch0 is a desktop product.

        This prototype needs a screen at least 1024 pixels wide. On a phone, it shrinks to fit and gets hard to read.