Financial services
Portals your data cannot leave for.
fund administrator and GP portals, custodian portals, and core banking admin consoles have no API. StitchOps still runs them.
What teams here run first.
Regulated data cannot route through a SaaS automation tool, and the systems that matter have no API.
Portal statement aggregation
Every administrator and custodian portal, downloaded and filed.
Access reviews across admin consoles
User lists pulled and compared to the directory on a schedule.
Credential rotation on shared portal logins
Rotated in the portal and updated in the vault, in one run.
Report pulls into the data warehouse
Scheduled downloads from portals only a person can log into.
How it runs
One worker VM. Every system.
The agent on a worker VM inside your network logs into fund administrator and GP portals, custodian portals, and core banking admin consoles with vaulted credentials, does the task the way operations, compliance, and IT would, and logs every step.
See the platform →Worker
worker-01 · connected
- Windows Server 2022 · signed installer
- outbound only · TLS 1.3 · 0 inbound ports
- unattended session · dedicated VM
Capabilities
- browser
- desktop
- terminal
- file
- ldap / ad
Systems reached today
- fund administrator and GP portalsbrowser14
- custodian portalsbrowser9
- core banking admin consolesbrowser6
- compliance toolsbrowser22
Secrets
31 references resolved on worker · 0 values sent to control plane
Evidence
Every run, on the record.
Status, timing and redacted results for each step, with the evidence a reviewer asks for attached to the run rather than reconstructed from screenshots later.
How security reviews go →| Run | Workflow | Time | Status |
|---|---|---|---|
| run_01j8k | offboard-closed-apps | 5.2s | ok |
| run_01j8h | rotate-portal-password | 12.4s | ok |
| run_01j8f | access-review-monthly | 188s | ok |
| run_01j8c | orphan-cleanup | 41.0s | failed |
| run_01j89 | oem-report-pull | 58.3s | ok |
Why operations, compliance, and IT trust it.
Credentials stay yours
Referenced from your vault or ours, resolved on the worker. The model never sees a value.
Runs in your environment
An outbound-only agent on a dedicated worker VM. Screen content never leaves it.
Compliance
SOC 2 Type 2, ISO 27001 certified, third party penetration tested, content-free telemetry. The agent runs inside your environment.
Start with one workflow that never had an API.
Fifteen minutes on your top three manual processes. We tell you which one to run first.