Operanet — identity & access across the systems you already run
Control keeps the vault and person graph on-prem. Worker runs typed ops outbound. Cloud handles signup, seats, and federation. License is entitlements only.
Components
- Control — on-prem identity graph, vault, policy, guided setup
- Worker — outbound-only executor of typed envelopes
- Cloud — signup, seats, MSP federation; never holds the vault or person graph
- License — entitlements and releases only; no operational data
What you connect
- Microsoft 365 / Entra
- Active Directory file shares
- Synology cameras (Surveillance Station)
- BreederWorks
- Savvy
- Copper Finance
- OpenPhone
Seats
Seats are managed identities — the people you govern in Control. Pricing is not shown here.
Security
- Outbound pull — Control fetches envelopes; Cloud does not punch inbound
- HMAC-signed typed envelopes only — no remote shell
- Cloud never stores the vault or the person graph
- License holds entitlements only — no operational data