← Back to landing
Showroom  ·  What Confida Integra does

Define integration metadata once, as code.
Run it as a live integration register.

Confida Integra discovers integration metadata directly from your production platforms — Red Hat® OpenShift®, Proxmox and more — orders and enriches it, and publishes the result to local and remote targets, turning your runtime into a register that is as accurate as the running infrastructure.

Confida Integra graph view
01 / Define as code

The integration spec is the deployment manifest.

Developers annotate at source. Integration metadata — source and destination system, protocol, criticality, owner, environment, data model — lives in the OpenShift Deployment as labels and annotations. Versioned, code-reviewed, PR'd alongside the integration code itself. There is no separate document to maintain. The same vocabulary works beyond OpenShift: a Proxmox guest declares the very same metadata in its Notes field and tags, so VM and container estates are discovered the same way.

# part of an OpenShift Deployment manifest
metadata:
  labels:
    ict.example.com/app-type: integration
    ict.example.com/source-system: workday
    ict.example.com/destination-system: personhub
    ict.example.com/environment: production
  annotations:
    ict.example.com/protocol: "REST → AMQP"
    ict.example.com/criticality: high
    ict.example.com/owner: hr-platform
    ict.example.com/data-model: employee.v3
# the same integration on a Proxmox guest — in the Notes field, no prefix
```confida
app-type: integration
source-system: billing-api
destination-system: crm
protocol: "REST → SQL"
criticality: high
environment: production
```
That's it. Deploy or annotate — on either platform — and the integration appears in the register.
02 / Discover from production

Production is the source of truth.

The collector reads your platforms directly, each one through the same documented collector contract. If something is running, it appears. If it stops running, it ages out. No human intervention required — and no opportunity for documentation to drift away from reality. One register, no matter where a workload lives.

Available now
Red Hat® OpenShift®
VE
On the roadmap
VMware vSphere
Nutanix
oVirt
OpenStack
Platform names and logos identify compatibility only, and are the property of their owners — full trademark notice at the foot of this page.
Collector reads cluster
The collector reads what is running.
03 / See it live

A graph that mirrors what is in production right now.

Filter by environment, criticality and status with AND-logic so the view reflects exactly the slice you need. Click any node for the detail panel — owners, data model, protocol, last-seen timestamp and environment context.

Filter by env, criticality, status. The graph and the detail panel update together.
04 / Distribute everywhere  ·  push and pull

One source. Many targets. Your CMDB reads it directly.

The same register leaves by three routes. Confida Integra pushes it on a schedule — as Markdown, to an Azure DevOps wiki page or into a local docs tree such as MkDocs or a wiki repo — and exposes it as a stable northbound REST API that customer-side systems pull on their own cadence: ServiceNow, Backstage, Grafana annotations, GitOps reconcilers, custom scripts. Confluence export is on the roadmap. Anything needed by hand leaves the dashboard directly: the list as Markdown, CSV or JSON, the graph as PNG, SVG or draw.io.

Distribution hub diagram
One source, many targets — your CMDB reads it directly.
05 / A platform, not just a tool

Documented, versioned, stable contract.

Confida Integra is the platform layer between your deployments and your existing IT registers. The northbound API is a published contract — your ServiceNow, Backstage or GitOps reconciler reads from it on its own schedule. We do not own your registers; we feed them.

# Read the live integration register from your own systems
curl -H "Authorization: Bearer cnf_v1_..." \
     "https://integra.example.com/api/v1/integrations?env=production&criticality=high"
{
  "data": [
    {
      "id": "a3f1...",
      "source_system": "workday",
      "destination_system": "personhub",
      "protocol": "REST → AMQP",
      "environment": "production",
      "status": "active",
      "extra": { "criticality": "high", "owner": "hr-platform" }
    }
  ],
  "pagination": { "page": 1, "per_page": 100, "total_items": 1, "total_pages": 1 },
  "generated_at": "2026-05-07T10:14:32Z"
}
Code → OpenShift / Proxmox → Confida Integra → your CMDB. Without a single human re-typing anything.

Your language, without waiting for us.

The interface ships in English and Finnish. Any other language is a JSON file you drop into the configuration volume — it appears in the language menu on the next page load, with no rebuild, no restart and no release from us. Untranslated strings fall back to English, so a partial translation is useful on day one. The in-product documentation works the same way: your own Markdown pages, per language, with the English original served and clearly marked wherever you have not written one.

# Generate a file with every string, translate it, drop it in
python cli/i18n_tool.py template de --label Deutsch
cp de.json /opt/integra/config/i18n/

# What is missing, and what would break the interface
python cli/i18n_tool.py check de
de: 63% (316/502 keys) — placeholder mismatch (1):
    err.auth.rate_limited: expected ['seconds'], found ['sekunden']
Translation is your content, not a support ticket. The tooling that checks it ships with the product, and a pseudo-locale generator lets you test the layout in a longer language before a translator has started.

Read the contract before you talk to us.

Everything you need to evaluate the integration surface is public, on GitHub, under Apache 2.0 — the OpenAPI 3.1 spec for the northbound API, the JSON Schema for an integration record, the OpenShift label and Proxmox metadata conventions your DevOps teams would annotate with, a Python client SDK and runnable examples. No NDA, no sales call, no private-repo grant. The engine is closed; the contracts are not, and nothing about them needs to be a secret.

The language packs live there too. If you translate the interface into your language, open a pull request — accepted packs ship with the product, credited, to every installation.

ConfidaSolutions / confida-integra
06 / Built for regulated environments

Security is documented, not asserted.

Every claim on this page maps to an artefact in the source repository. The gap analysis, the support-period statement, the SBOM and the coordinated-disclosure policy are public — your security architect can read them line by line during procurement. Confida Integra is built for the compliance reality of public-sector and regulated-industry buyers handling personal and confidential data.

Frameworks mapped
OWASP Top 10 · CIS Controls v8 · ISO 27001:2022 Annex A · EU CRA Annex I · GDPR Art 32 · NIS2-relevant controls
Coordinated disclosure
Published SECURITY.md with reporting channel, CVSS v3.1 severity thresholds and response-time targets — satisfies CRA Article 13(15)
Supply chain transparency
SBOM (CycloneDX 1.5 + SPDX 2.3) and dependency vulnerability scan published with every release; pipeline fails on high or critical CVEs
In-product controls
Session auth · RBAC · bcrypt password hashing · CSRF guard · rate-limiting · CSP · structured audit log · dormant-account review (CIS v8 §5.3)
Support window
Five-year product-line support per CRA Art 13(8), with rolling minor-level fixes and a 12-month end-of-life advance-notice commitment
Container hardening
Resource limits, non-root user (planned), capability-dropped runtime — defense in depth that matters when the product sits next to a CMDB
Security posture in SECURITY-POSTURE.md and the reporting channel in SECURITY.md, both in the public repository. The full control-by-control assessment is available to customers and prospects on request under NDA.
See it for yourself.

The interactive demo is being prepared. In the meantime, get in touch directly.