Dual approval
Two approvers for isolate and block actions.
← Partner directory
SOAR partners / governance-first automation
SOAR partners (roadmap)
Cortex XSOAR and FortiSOAR appear on the connector roadmap — Reflex remains the native SOAR with policy-gated automation.
ReflexNative SOAR today
XSOARCortex — Roadmap
FortiSOARRoadmap
Partner overview
Automate response — not recklessness.
Cortex XSOAR and FortiSOAR appear on the connector roadmap. Axix Reflex remains the native SOAR with policy-gated playbooks, dual approval for destructive actions, and stage-then-execute honesty.
Presentation Ecosystem table: Cortex XSOAR and FortiSOAR are Roadmap; typical SOAR today is XSOAR / Cortex while Oryx ships native Reflex.
Destructive Reflex actions still require dual approval and a fail-closed Policy Engine — connectors do not bypass governance.
Partner paths
Explore related ecosystem entries.
Stage-then-execute
Durable queue — no inline fake success.
Audit chain
Hash-chained history for every action.
Native Reflex
Policy Engine governs every destructive path.
Playbooks are AI-proposed but human-approved before activation. Isolate host and block IP require two distinct owner/admin approvers.
- Case Kanban from new → resolved
- Dead-letter queue with governance-checked requeue
- OCSF triggers from Sentinel and Vantage
Roadmap coexistence
XSOAR and FortiSOAR — bidirectional OCSF planned.
Connectors will not bypass Policy Engine or Safety Gate. External SOAR paths remain governed by the same audit chain.
- Cortex XSOAR — Roadmap
- FortiSOAR — Roadmap
- StackStorm playbooks optional — honest simulated state when unreachable
“
Automation without governance is just faster risk.Axix Oryx / Reflex governance
More partners
Other ecosystem paths.
Connectors + Control plane
Explore all integrations
Find the right coexistence path for your SIEM, EDR, and SOAR investments — Oryx extends your stack, it does not force a rip-and-replace.
Axix Connectors
Technology partners & connectors
Axix Connectors is the marketplace for bidirectional OCSF integrations — Splunk HEC and generic REST available today.
MSSP Portfolio
Managed security service providers
MSSP Bundle packaging — portfolio mode, multi-workspace, grant-audited client switch, and white-label branding.Meet with us
Connect directly with a partner rep.
Tell us about your integration path — we will map coexistence, packaging, and rollout.