| Cloud CSPs | AWS, Azure, Google Cloud, OCI |
| Cloud Identity | AWS IAM, Entra ID, Google IAM |
| Kubernetes | EKS, AKS, GKE, OpenShift, vanilla K8s |
| IaC | Terraform, Pulumi, CloudFormation, Bicep, Helm |
| Git | GitHub Enterprise, GitLab, Bitbucket, Azure Repos |
| CI/CD | GitHub Actions, GitLab CI, Jenkins, Azure Pipelines |
| Artifact | ECR, ACR, Artifact Registry, Harbor, Nexus |
| KMS/Secrets | HashiCorp Vault, AWS KMS, Azure Key Vault, GCP KMS |
| Network edge | Cloudflare, Akamai, AWS WAF, Azure Front Door |
| API gateway | Apigee, Kong, AWS API Gateway, Azure APIM |
| Runtime | Falco / eBPF pipelines / EDR/XDR telemetry |
| Logging | CloudTrail, Cloud Audit Logs, Azure Monitor |
| SIEM | Microsoft Sentinel, Splunk, Elastic, Chronicle |
| ITSM | ServiceNow, Jira Service Management, Azure DevOps |
| ChatOps | Microsoft Teams, Slack, e-posta |
| GRC | Control register, auditor portal, evidence export |
| SBOM | CycloneDX, SPDX, VEX |
| Provenance | SLSA/in-toto attestations, Sigstore/Cosign |
| Threat feeds | NVD, CISA KEV, EPSS, vendor advisories |
| Storage | S3-compatible evidence store, PostgreSQL/object store |
