CI/CD
Create and destroy masked workspaces from GitHub Actions, GitLab CI, Jenkins, Buildkite, or internal runners.
GitHub ActionsGitLab CIJenkinsBuildkiteCircleCI
// integrations // your stack, governed
Connect SOFI to the stack you already use.
38+ databases, every major CI/CD platform, enterprise SSO, observability stacks, and AI agents — all plug into the same governed test data workflow.
// 01 / database connectors
16 connectors shown. 38+ supported. Read-only access only.
// 02 / developer surface
Trigger safe data from code, pipeline, or agent.
The same workflow runs through CLI, REST, webhooks, and MCP. Platform teams can standardize the path instead of maintaining one-off scripts.
CLI
REST API
Webhooks
MCP / Agents
GitHub Actions
Private cloud
$ sofi integrations connect
// 03 / categories
Already integrated with what your team runs.
Identity
Bring enterprise login and authorization into the same policy path as provisioning and refresh.
SAMLOIDCLDAP / ADSCIMOktaAzure AD
Observability
Forward job status, audit events, policy decisions, and provisioning metrics to the tools your team already watches.
DatadogGrafanaSplunk HECSlackPagerDutySyslog
AI agents
Expose safe workspace operations through typed tools — masking, RBAC, and audit still enforced server-side.
MCPCursorClaude CodeWindsurfOpenAIAnthropic
// 04 / engine modules // code you can audit
The same engine ships in production.
SOFI is built as composable engine modules. Security teams audit them. Platform teams extend them. Every integration sits on top of the same foundation.
38+ engines
engine/connectors
38+ database connectors. Auto-registers via ConnectorRegistry.
50+ rules
engine/masking
50+ rules, 27 PII categories, hyperscale fan-out via Celery chord.
12× dedup
engine/snapshot
CoW with 4MB blocks, SHA-256 dedup, zstd compression.
< 15ms lag
engine/cdc
PostgreSQL WAL, MySQL binlog, Oracle, SQL Server logical replication.
exactly-once
engine/replication
Pipeline CDC → Transform → Destination. Coordinated VDB groups.
FK safe
engine/subsetting
Subset with referential integrity. Foreign key aware.
Every integration inherits the same controls.
Private routing, RBAC, masking policy, soft-delete + audit trail. Adding GitHub Actions or Slack doesn't loosen the security baseline.