Outbound-only by design.

Built for regulated environments that cannot accept inbound firewall rules.

How it connects

CUSTOMER ENV AD · Okta AWS · SaaS PeopleSoft Legacy apps outbound mTLS no inbound rule HYBRID CONNECTOR Gateway (HCG) customer-managed inside your VPC signed events SHA-256 · ECDSA EVIDENCE STORAGE Customer S3 your AWS account your region customer-controlled ✓ No inbound ports ✓ Customer-managed gateway ✓ Evidence stays in your account ✓ BYO-KMS encryption ✓ Hash-chained audit trail ✓ Customer-controlled retention