Integrations and deployment
KMayer supports API connections, authorised exports and scoped collection components. A provider is not treated as live until authorisation is saved, connection tests pass and the source completes validation.
Connection modes
Read-only or least-privilege access is requested for the approved tenant, account, subscription, repository or project boundary.
Secret Manager reference; authorised scopes; tenant and account boundary; authoriser; timestamp.
A customer-approved export is parsed, normalised and bound to the organisation and source without turning the file into a live connection.
Export provenance; schema version; import time; integrity hash; accepted record count; field-loss result.
A separately approved deployment collects only the agreed scope and reports health, freshness and collection boundaries.
Deployment identity; permitted networks; collection scope; health; last successful evidence receipt.
Provider directory
These entries describe supported source contracts. They do not mean that a customer source is connected or that KMayer holds its credentials.
12 source contracts shown
| Provider | Required account | Least-privilege boundary | API or authorised export | Freshness and limits |
|---|---|---|---|---|
| Azure | Microsoft Entra tenant and selected Azure subscriptions. | Reader on selected subscriptions; Security Reader only when Defender for Cloud findings are included. | Azure Resource Manager API; Azure Resource Graph JSON or CSV. | Full and incremental sync after authorisation; provider quotas and pagination apply. |
| Microsoft Entra ID | Microsoft Entra tenant with an administrator able to grant consent. | Directory.Read.All, User.Read.All, Group.Read.All, Application.Read.All and AuditLog.Read.All. | Microsoft Graph API; Graph JSON or sign-in and audit CSV. | Full and incremental sync after authorisation; provider quotas and pagination apply. |
| AWS | AWS Organizations management account or selected member accounts. | SecurityAudit or a narrower read-only equivalent; List and Describe for selected accounts and regions. | AWS STS and Config APIs; Config snapshot or Security Hub findings JSON. | Full and incremental sync after authorisation; provider quotas and pagination apply. |
| Google Cloud | Google Cloud organisation or explicitly selected projects. | Cloud Asset Viewer and Browser; Security Center Findings Viewer only when findings are included. | Cloud Asset and Security Command Center APIs; authorised JSON exports. | Full and incremental sync after authorisation; provider quotas and pagination apply. |
| Cloudflare | Cloudflare account with explicitly selected zones. | Read-only account, zone, DNS, SSL certificate and zone-settings permissions for the selected boundary. | Cloudflare API; account, zone, DNS, SSL and certificate metadata export. | Full and incremental sync after authorisation; provider quotas and pagination apply. |
| GitHub | GitHub organisation with selected repositories. | Read-only GitHub App: metadata, members, contents, security events and Dependabot alerts. | GitHub API; organisation and repository JSON or SARIF 2.1.0. | Full and incremental sync after authorisation; provider quotas and pagination apply. |
| Microsoft Sentinel | Azure tenant, subscription and selected Log Analytics workspaces. | Microsoft Sentinel Reader and Log Analytics Reader on selected workspaces. | Azure and Log Analytics APIs; incidents JSON or query CSV. | Full and incremental sync after authorisation; provider quotas and pagination apply. |
| ServiceNow | ServiceNow instance with a dedicated integration identity. | Read-only ACLs for approved CMDB, incident and change-request fields; no admin or write roles. | ServiceNow Table API; table JSON or CMDB CSV. | Full and incremental sync after authorisation; provider quotas and pagination apply. |
| Jira | Atlassian Cloud site with explicitly selected Jira projects. | Read-only Jira work, user and project scopes; offline access only for approved refresh. | Jira Cloud API; authorised issues CSV or JSON. | Full and incremental sync after authorisation; provider quotas and pagination apply. |
| CMDB | Authorised CMDB instance and read-only integration identity. | Read-only assets, relationships and owners for approved classes and tables. | Approved CMDB API; normalised JSON or RFC 4180 CSV. | Full and incremental sync after authorisation; provider quotas and pagination apply. |
| Vulnerability source | Authorised vulnerability platform or approved authoritative feed bound to the asset scope. | Read-only assets, findings, scans and remediations for approved business units, groups or tags. | Approved source API, CISA KEV, FIRST EPSS or NVD; JSON, CSV or SARIF 2.1.0. | Source freshness and publication time remain visible; quotas and feed release schedules apply. |
| Threat intelligence source | Authorised TAXII collection, threat-intelligence tenant or approved authoritative feed. | Read-only collections, objects and indicators for the approved source boundary. | TAXII 2.1 or approved CISA, CVE, FIRST, NVD and Ubuntu OSV feeds; STIX 2.1 JSON. | Source freshness and publication time remain visible; quotas and feed release schedules apply. |
No provider source contract matches this search. Review the source families or contact KMayer for an environment-specific boundary.
Validation sequence
Operational boundary
Entitlement and outputs
A provider connection is enabled only for capabilities included in the customer’s active server-side entitlement. Connecting a source does not expand licensed asset capacity or add capabilities that were not purchased.
Customer delivery boundary
Have questions or need expert IT support? We’re here to help! Whether you’re looking for managed services, cybersecurity solutions, or cloud infrastructure, our team of professionals is ready to assist. Let’s work together to elevate your business with customized IT solutions.
KMayer Ltd | UK & Europe Technology Solutions
© 2026 KMayer Technology Solution. All rights reserved.