Welcome to the Veltrix SecOps documentation. Veltrix is the Security-as-Code change control plane: every configuration change to your security tools flows through one governed pipeline — validated, human-approved, progressively deployed, health-checked, and watched for drift.
Veltrix manages the configuration of your security tools — a catalog of 96 apps in the open app marketplace, from Splunk and Microsoft Sentinel to CrowdStrike Falcon and Microsoft Entra ID — the way modern teams manage application code: versioned, reviewed, and deployed with safety controls.
Follow these steps to get from sign-up to your first governed deployment:
Visit app.veltrixsecops.com and create your tenant.
Open the Apps page and install the integration for your tool — for example, Splunk Enterprise or Splunk Cloud.
Add the components you manage (indexers, search heads, cloud stacks), store credentials, and assign a connectivity provider for self-managed hosts.
Tag your environments (dev, staging, production) and define per-environment rules: required approvers, deployment strategy, canary steps, and auto-rollback thresholds.
Create your first Configuration Canvas, submit it for approval, and deploy it through the pipeline.
Install the developer CLI with npm install -g @veltrixsecops/cli, then scaffold an app with veltrix init <app-id>. See Client & Developer Tooling.
Veltrix is delivered as hosted SaaS — there is nothing to install to get started. Enterprise customers on the Custom plan can discuss on-premises deployment options with our team.
| Option | Best for | How to get it |
|---|---|---|
| Hosted SaaS (multi-tenant) | Most teams — fastest start, managed upgrades and backups | Sign up on Starter or Professional |
| On-premises / dedicated | Enterprises with data-residency or isolation requirements | Contact sales about the Custom plan |
Note that your security tools stay where they are — Veltrix reaches self-managed components over your choice of nine zero-trust connectivity providers (Tailscale, SSH, WireGuard, Cloudflare Tunnel, ZeroTier, Nebula, OpenVPN, AWS SSM, HashiCorp Boundary), with credentials encrypted at rest.
Task-oriented guides to every area of the portal: what each feature does, where to find it, every setting, who can use it, and which plans include it.
Author, version, diff and submit configuration changes for approval.
The pipeline dashboard, environment matrix, deployment flows and deployments.
How scheduled sweeps flag out-of-band changes and what you can do about them.
Safe workspaces to build and preview configurations before they reach a pipeline.
Browse the catalog, enable apps, manage settings and upgrades.
Connect AWS, Azure, GCP and Hetzner and understand what each test proves.
Bring-your-own connectivity providers and the remote access settings.
Link ServiceNow and Zendesk tickets to changes and see what is written back.
Organization profile, users, roles pointers and tenant groups.
Create, scope and revoke keys; webhooks; where tokens are used.
What each plan includes, the real limits, and how the 14-day trial behaves.
Your profile, two-factor authentication for local accounts, and notifications.
Tool integrations are open-source apps. An app packages canvas templates and six pipeline handlers — validate, deploy, rollback, health-check, drift-detect, status — and inherits the platform's approval and safety machinery for free.
The conceptual map: layout, manifest, handlers, connectivity, and the release model.
Typed handler contracts, contexts, result types, and layout helpers in @veltrixsecops/app-sdk.
veltrix init, validate, package, and the sandbox dev loop.
Build app pages that look native with the shared component library.
Everything in the UI is available through the REST API, authenticated with scoped, revocable API keys. That makes Veltrix the natural governance layer for AI-driven operations: agents propose changes through the API, and the pipeline's validation, human approval, progressive deployment, and drift detection apply automatically.