⚙️
Automate multi-step operations — approvals, notifications, escalations — with a visual playbook builder instead of a script nobody maintains.
- Playbooks as a directed graph of nodes on a ReactFlow canvas, with draft/active/paused/archived states
- Webhook, schedule, gRPC, and manual trigger types, with HMAC-signed webhook URLs
- Approval gates that pause a run for human sign-off; versioned playbooks and reusable templates
🎫
Unified issue tracking — projects, milestones, and an internal helpdesk for staff support requests — synced with external trackers.
- Issues, projects, milestones, labels, and comments, synced bi-directionally with GitHub, GitLab, Jira, Trello, and OpenProject
- An internal helpdesk for the organization’s own staff — tickets are native Issues, with SLA policies and canned responses
- Email intake and an admin-configurable public intake form that lets requests reach the internal helpdesk, with independent CAPTCHA controls (Turnstile/reCAPTCHA or Elder’s own Altcha)
- Internal support only — public-facing community and customer relations are handled by Waddles (waddles.app)
🕸️
Visualize how identities, software, services, network, and data stores connect, mapped to your organizational structure.
- Directed dependency edges between any two entities, with a dependency type and optional metadata
- Interactive ReactFlow graph — zoom, pan, select nodes, and drill into entity detail
- Unlimited-depth Company → Department → Team hierarchy, with optional LDAP DN / SAML group linkage
- REST endpoints for organization-wide or entity-centered graph queries (GET /api/v1/graph)
🛡️
Review who has access on a regular schedule, and let people formally request access to a group or resource instead of asking around.
- Scheduled review campaigns with per-item sign-off and assigned reviewers
- A request/approval workflow for identities requesting membership in a group or resource role
- Resource-role definitions scoped to a specific resource type, shared across both workflows
🗂️
One inventory covering identity, software, services, network, IPAM, and data stores, plus flexible tracking for 40+ other infrastructure types.
- Dedicated resource schemas for Identity, Software, Services (with on-call), Network, IPAM, and Data Stores
- A flexible Entity model spanning five categories and 40+ sub-types: Network, Compute, Storage, Datacenter, Security
- A 15-module system lets teams enable only the capabilities they need, toggled per module or per group via environment variables
🔐
One identity graph for users, service accounts, and API keys, synced from your identity providers, with RBAC.
- Multi-provider sync from Okta, LDAP/AD, AWS IAM, and Google Workspace, with group management
- SAML 2.0 and OAuth2 single sign-on with configurable identity providers
- Global roles (Super Admin, Org Admin, Editor, Viewer) plus resource-scoped roles applied per organization or entity
🔌
One connector layer spanning public cloud (AWS, GCP, Google Workspace) and on-prem infrastructure (Kubernetes, LDAP, vCenter, FleetDM, iBoss) — plus Okta/Authentik write-back.
- Read-only discovery for AWS, GCP, Google Workspace, Kubernetes, LDAP/LDAPS, vCenter, FleetDM, iBoss, and LXD — the same graph whether a resource sits in a public cloud account or on-prem hardware
- Okta and Authentik connectors support bidirectional group-membership write-back
- Provider-specific ID matching so re-syncs update records instead of duplicating them
🌐
CIDR prefixes, addresses, and VLANs as first-class, tenant-scoped resources with their own dedicated schema.
- Hierarchical prefix nesting with optional VRF separation for overlapping address space
- Addresses linkable to DNS names and assignable to entities or services, with NAT tracking
- VLAN tracking independent of prefixes and addresses, for allocation planning before subnets exist
🔑
References to values in your secrets provider or Elder’s own encrypted storage, plus certificate lifecycle tracking.
- Integration with HashiCorp Vault, AWS/GCP Secrets Manager, and Infisical, or built-in encrypted storage, with per-access audit logging
- Certificate lifecycle tracking (issuer, subject, algorithm, fingerprints, expiration) linked to the entities that use them
- Scoped, identity-bound API keys with rotation support
📦
Software Bill of Materials inventory and vulnerability tracking across your software entities.
- Dependency parsing across Python, Node.js, Go, Rust, Java, Gradle, and .NET ecosystems
- License-policy tracking alongside the SBOM dashboard
- Vulnerability data attached directly to the software and service entities it affects
📄
Versioned documents and wiki pages, collaborative diagrams, and PII/PHI/PCI compliance metadata tracked on the resources they describe.
- Documents (versioned files) and Pages (wiki-style content), both organized into collections
- A collaborative diagramming application with sharing, comments, shape libraries, templates, and export to JSON or SVG
- Compliance metadata (PII, PHI, PCI) tracked directly on Data Store resources for audit-ready records
- Comprehensive audit logging across entity, organization, and identity changes; advanced audit and compliance reporting for SOC 2 and ISO 27001 is an Enterprise capability
🔗
A versioned REST API for every resource, plus a high-performance gRPC API for server-to-server integrations.
- Resource-based REST API under /api/v1/, JWT Bearer auth, pagination, and filtering
- Webhook notifications for entity and issue lifecycle events, with per-webhook delivery history
- A 37-method gRPC service over HTTP/2, with gRPC-Web browser support via Envoy; OpenAPI 3.0 spec with Swagger UI
