Quantix
Security & identity

Built to pass
a security review.

Your identity provider. Real RBAC. No inbound holes into the management plane.

Send your questionnaire
Identity providerOIDC / SAML / LDAP
Control planeAuthN & AuthZ · Policy engine · API
Private infrastructureYour network. Your data.

Security built in.

Rust + Go

Security, performance, reliability.

Zero-trust connectors

Outbound-only. No inbound access.

OIDC / SAML / LDAP

Use your existing identity provider.

Roles + scopes

Granular permissions across your infrastructure.

Atomic A/B updates

Safe changes. Fast recovery.

Audit-ready operations

Complete, immutable audit trail.

Your network stays private.

Your private networkVMs, storage, Kubernetes, databases
Quantix connectorThe connector owns its key. Configuration is polled outbound.
Control planeManage, deploy, observe

No inbound access. No exposed management plane. Your infrastructure remains in your network.

Your identity. Your permissions.

Platform Admins admin system:config
Developers deployer infra:deploy
SRE Team operator infra:rollback
Read Only viewer project:read

Every action leaves evidence.

platform-bot Deploy update Allowed · policy matched
Completed
ci-runner Delete resource Denied · insufficient scope
Blocked
sre-automation Roll back update Allowed · policy matched
Completed

Updates that know how to recover.

1Active slotCurrent version serving traffic
2Staged slotNew version deployed
3Verified bootHealth checks confirm
4Clean rollbackAutomatic if needed
Quantix Send us your security questionnaire.

We’ll answer it against the platform you will actually run.

Schedule a call
Book a demo
SECURITY & IDENTITY

Built to pass
a security review.

Your identity provider. Real RBAC.
No inbound holes into the management plane.

Send your questionnaire →
Identity provider
OIDC
SAML
LDAP
mTLS
mTLS
Quantix
Control plane
AuthN & AuthZ
Policy engine
API & UI
Outbound-only connector outbound only
mTLS
mTLS
Your private
infrastructure
Compute
Storage
Networking
Your environment
Who can act? Role scopes. Fine-grained permissions mapped to your identity provider. → What can reach the network? Outbound-only connectors. No inbound access to your infrastructure or management plane. → What happened? Audit-ready operations. Complete, tamper-evident audit logs for every action. →

Security built into the control plane.

Rust + Go
→ GO
A modern, secure foundation for reliable operations.
Zero-trust connectors
Outbound-only, mutually authenticated connectors (mTLS).
OIDC / SAML / LDAP
Integrate with your identity provider.
Roles + scopes
Map identity groups to precise permissions.
Atomic A/B updates
A B
Deploy safely with automatic rollback.
Audit-ready operations
Every action is logged, queryable and exportable.

Your network stays private.

The connector owns its key. Configuration is polled outbound.

Your private network
VMs
Storage
Kubernetes
Databases
Quantix
Connector
outbound only
mTLS
(outbound only)
Control plane

Your identity. Your permissions.

Map your identity groups to roles and granular scopes.

Identity groups
Platform Admins
Developers
SRE Team
Read Only
→
→
→
→
Roles
admin
deployer
operator
viewer
→
→
→
→
Scopes (example)
project:read
system:config
infra:deploy
infra:rollback

Every action leaves evidence.

A complete, tamper-evident audit log.

Actor
Target
Action
Policy result
Timestamp
Outcome
user:alice
project/prod
infra:deploy
Allowed
2024-05-14 10:22:17
Completed
group:platform-admins
system
system:config
Allowed
2024-05-14 09:41:03
Completed
user:bob
project/finance
infra:rollback
Denied
2024-05-14 08:17:56
Denied
user:carol
project/dev
project:read
Allowed
2024-05-14 07:03:11
Completed

Updates that know how to recover.

Atomic A/B updates with automatic rollback.

Active slot
Version N
(in service)
→
Staged slot
Version N+1
(inactive)
→
Verified boot
Health checks pass
→
Clean rollback
Automatic rollback
if needed
Quantix

Send us your security questionnaire.

We'll answer it against the platform you will actually run.

Schedule a call →