Dual approval
Two approvers for isolate and block actions.
← Partner directory
SOAR partners / governance-first automation
SOAR partners (roadmap)
Cortex XSOAR and FortiSOAR appear on the connector roadmap and Reflex remains the native SOAR with policy-gated automation.
ReflexNative SOAR today
XSOARCortex and Roadmap
FortiSOARRoadmap
Partner overview
Automate response and not recklessness.
Cortex XSOAR and FortiSOAR appear on the connector roadmap. Axix Reflex remains the native SOAR with policy-gated playbooks, dual approval for destructive actions, and stage-then-execute honesty.
Presentation Ecosystem table: Cortex XSOAR and FortiSOAR are Roadmap; typical SOAR today is XSOAR / Cortex while Oryx ships native Reflex.
Destructive Reflex actions still require dual approval and a fail-closed Policy Engine and connectors do not bypass governance.
Partner paths
Explore related ecosystem entries.
Stage-then-execute
Durable queue and no inline fake success.
Audit chain
Hash-chained history for every action.
Native Reflex
Policy Engine governs every destructive path.
Playbooks are AI-proposed but human-approved before activation. Isolate host and block IP require two distinct owner/admin approvers.
- Case Kanban from new → resolved
- Dead-letter queue with governance-checked requeue
- OCSF triggers from Sentinel and Vantage
Roadmap coexistence
XSOAR and FortiSOAR and bidirectional OCSF planned.
Connectors will not bypass Policy Engine or Safety Gate. External SOAR paths remain governed by the same audit chain.
- Cortex XSOAR and Roadmap
- FortiSOAR and Roadmap
- StackStorm playbooks optional and honest simulated state when unreachable
“
Automation without governance is just faster risk.Axix Oryx / Reflex governance
More partners
Other ecosystem paths.
Connectors + Control plane
Explore all integrations
Find the right coexistence path for your SIEM, EDR, and SOAR investments and Oryx extends your stack, it does not force a rip-and-replace.
Axix Connectors
Technology partners & connectors
Axix Connectors is the marketplace for bidirectional OCSF integrations and Splunk HEC and generic REST available today.
MSSP Portfolio
Managed security service providers
MSSP Bundle packaging and portfolio mode, multi-workspace, grant-audited client switch, and white-label branding.Meet with us
Connect directly with a partner rep.
Tell us about your integration path and we will map coexistence, packaging, and rollout.