NaoShift integrations: hypervisors, backups, SAN arrays and cloud

Read-only vSphere monitoring connector on the vCenter API: clusters, hosts, VMs, datastores and networks collected continuously, with their performance and vCenter events. Remote console and actions are enabled target by target.

• vCenter API, read-only account
• Clusters, hosts, VMs, datastores and networks
• Performance, vCenter events and tasks
• Remote console and actions as an option

Proxmox VE connector with an API token: nodes, clusters, VMs and LXC containers, storage and performance. High availability, console and actions are enabled target by target, with a dedicated account.

• Proxmox API token, read-only by default
• VMs and LXC containers, multi-cluster
• CPU, RAM, disk and network performance
• Remote console, HA and actions as an option

Read-only Nutanix Prism Central connector: a single connection point covers every AHV cluster. Inventory, native performance (IOPS, latency) and protection state (Protection Domains, Leap) land in the same console.

• One Prism Central endpoint for N clusters
• Native per-VM and per-host IOPS and latency
• Protection Domains and Leap correlated to VMs
• Prism-managed ESXi clusters excluded (no double counting with vCenter)

Xen Orchestra · XCP-ng

Vates

Read-only Xen Orchestra connector for your XCP-ng pools: VM and host inventory, performance metrics, and Backup NG jobs correlated to each VM. A single connector covers both the hypervisor and its protection.

• XCP-ng pool, host, VM and network inventory
• CPU, RAM, disk and network performance metrics
• Backup NG jobs correlated VM ↔ backup
• Remote console on XCP-ng VMs

Hyper-V connector, standalone host or failover cluster (Windows Server 2016 and later, Azure Local included), over WinRM HTTPS: hosts, VMs, disks, networks, CSVs, checkpoints, Hyper-V Replica and performance metrics, in the same console as your other hypervisors.

• Read-only collection account, WinRM HTTPS 5986
• VM operations: power, checkpoints, clone from a template, live migration, disks and adapters
• Node maintenance and high availability per cluster role
• Hyper-V and cluster event logs for root cause analysis

Real-time Veeam integration for Backup & Replication (REST API v12 and v13, Enterprise Manager). Every VM in the estate is matched to its protection state: jobs, restore points, repositories and sessions.

• Automatic VM ↔ backup correlation
• Jobs, sessions and restore points
• Actual RPO checked against your targets
• Repository saturation forecasting

Read-only Commvault connector: VM protection, last backup, RPO and SLA status matched to your VMs — unprotected VMs surface in the action plan.

• Protected object inventory
• VM ↔ backup correlation
• Repositories and capacity
• Unprotected VMs detected

Rubrik Security Cloud connector (GraphQL API) with a read-only service account: VMware VMs protected by SLA domains, last snapshot and RPO, Retention Lock, clusters and backup activity, matched to your inventory.

• Service account (client ID / secret), read-only
• SLA domains, last snapshot and RPO per VM
• Retention Lock counted as an immutable copy
• Outbound HTTPS to your my.rubrik.com account

Proxmox Backup Server connector: backup snapshots, verify runs, datastores, and correlation with the Proxmox VE VMs of the estate.

• Snapshots and verify runs
• VM ↔ backup correlation
• Datastores and capacity
• Per-VM Proxmox VE coverage

Read-only ONTAP REST connector (9.8 and later): aggregates, SVMs, volumes, LUNs, snapshots and SnapMirror, correlated with your datastores and VMs. AFF, FAS, ASA, ONTAP Select, Cloud Volumes ONTAP and FSx for ONTAP.

• Array ↔ datastore ↔ VM by identifier (NAA, NFS export)
• Saturation forecast for aggregates and volumes
• Snapshots, SnapMirror, anti-ransomware protection and SnapLock
• EMS events and audit log for root cause analysis

Read-only PowerStore REST connector (PowerStoreOS 2.0 and later): appliances, volumes, file systems, snapshots and replication sessions, correlated with your datastores and VMs. PowerStore T and X models.

• Collection account with the Operator role, read-only
• Array ↔ datastore ↔ VM by identifier
• Snapshots, secure snapshots and replication
• Array events and audit log

FlashArray (Everpure, formerly Pure Storage) REST 2.x connector with the API token of a read-only user: volumes, hosts, protection groups, pods, SafeMode and replication, correlated with your datastores and VMs. FlashArray//X, //C and //XL.

• API token of a user with the readonly role
• Array ↔ datastore ↔ VM by identifier
• Protection groups, pods, SafeMode and replication
• Array alerts and audit log

Read-only SANsymphony (REST API) connector: server group, disk pools, virtual disks and synchronous mirrors, correlated with your datastores and VMs.

• Read-only collection account
• Array ↔ datastore ↔ VM by identifier
• Synchronous mirrors and server health
• Pool capacity and saturation date

Read-only DeviceManager REST connector (OceanStor V5 to Dorado 6.1): pools, LUNs, file systems, snapshots and HyperMetro, correlated with your datastores and VMs.

• Read-only collection account, one session per collection
• Array ↔ datastore ↔ VM by identifier
• Snapshots and HyperMetro replication
• Pool capacity and saturation date

Read-only Azure Resource Manager connector: subscriptions, VMs and disks. Cloud VMs join your inventory like any other VM, with their risks, capacity and backups.

• Azure Resource Manager API, agentless
• Subscriptions, VMs and disks
• Cloud VMs in the same inventory as on-premise
• Costed migration scenarios to Azure

RVTools export (.xlsx) import: the complete inventory of a VMware estate analyzed within minutes, with nothing to install and no access to the vCenter. The starting point of the free trial.

• RVTools Excel (.xlsx) export, through the UI or the API
• No vCenter access required
• Risks, capacity and obsolescence from the import
• Name anonymization at import

LiveOptics (Dell) export import. Your LiveOptics CSV/Excel files give a complete analysis of your VMware infrastructure without direct vCenter access.

• LiveOptics CSV/Excel import
• VM and host inventory analysis
• Automatic topology detection
• Compatible with Dell exports

Connect your assistants and AI agents to your estate through MCP (Model Context Protocol): inventory, risks, opportunities, capacity and backups, queryable in natural language from Claude, ChatGPT or your in-house agents.

• Hosted endpoint: mcp.naoshift.io
• Inventory, risks, opportunities, capacity, backups
• API-key authentication, read-only
• Anonymization: your agents only handle neutral identifiers

The API behind the NaoShift Core screens, authenticated by key: inventory, risks, imports and actions according to the key's rights. For your scripts, your CMDB or your ITSM tool.

• Per-user API key, revocable
• Same verbs and same refusals as the UI
• RVTools import through the API
• Rights checked server-side, on every call

The operators' command line: inventory, actions and console from a terminal or a CI pipeline, on the same API and with the same rights as the UI.

• Enrollment with a single-use token, revocable key
• Read-only by default, the right to act granted explicitly
• Actions followed to their outcome, destructive operations confirmed
• JSON output for your scripts and your CI

Bring your own model: on the on-premise installation, NaoShift's AI (analyses, assistant) runs on the model of your choice — an OpenAI-compatible endpoint hosted on your side (vLLM, Ollama, LiteLLM…) or your own OpenAI key.

• OpenAI-compatible endpoint (/v1/chat/completions)
• Model enforced on every call if needed
• Air-gapped: no AI request leaves your network
• With no model configured, AI features step aside cleanly

Single sign-on through OpenID Connect with your identity provider, for the console and for the customer portal. SSO can be made mandatory, with break-glass accounts.

• Identity provider per company
• Mandatory SSO, break-glass accounts
• MFA by email or SMS outside SSO
• Same mechanism for the customer portal

Your users sign in with their Microsoft Entra ID (formerly Azure AD) account, through OpenID Connect.

Keycloak as the identity provider through OpenID Connect, on your instance or on the hosting provider's.

Alerts and notifications in your Slack channels, configured per company.

Alerts and notifications in your Microsoft Teams channels, configured per company.

Events sent to your tools (ITSM, automations, chatops) by webhook, with a shared secret.

Audit log streamed continuously to your SIEM, as Syslog over TLS or HTTP (JSON): sign-ins, actions, rights changes.

• Syslog over TLS (RFC 5424) or HTTP JSON
• Filter by datacenter scope
• Real names, stable pseudonyms or counts only
• Any SIEM that receives Syslog or JSON

Daily digest and alerts by email, in each recipient's language. The digest never names an asset.