Now supporting Okta, Entra ID, Auth0, Ping, 1Password, Workato, Boomi, Zapier, Google Workspace, Slack & Salesforce
Identity Security & AI Agent Governance

One Small ChangeCan Crash Everything

A single misconfiguration can cost you revenue, compromise your security, and kill productivity. Butterfly Security captures every change, shows you the ripple effects, and helps you recover fast.

Request early accessNo credit card requiredTry the interactive demo

Supported Platforms

Okta

34 resource types

Entra ID

12 resource types

Auth0

10 resource types

Ping Identity

11 resource types

1Password

2 resource types

Workato

15 resource types

Boomi

17 resource types

Google Workspace

9 resource types

Slack

7 resource types

Zapier

9 resource types

Salesforce

19 resource types

THE BUTTERFLY EFFECT

One Small Change.
Massive Business Impact.

Your identity configuration is the backbone of your business. Every user login, every app connection, every security policy flows through it. When something breaks, the ripple effects hit revenue, security, and productivity all at once.

Lost Revenue

$9,000per minute of downtime

When employees can't log in, work stops. Sales can't access CRM. Support can't help customers. Every minute of identity outage bleeds money.

Source: Gartner, 2024

Security Exposure

241days avg. to identify & contain a breach

A rogue app or policy change can create security holes that go unnoticed for months. Without change tracking, you're flying blind.

Source: IBM Cost of a Data Breach, 2024

Productivity Drain

<7%of companies recover within a day

Manual recovery means IT scrambling for days. Help desk tickets pile up. Projects stall. Your team burns out fixing preventable problems.

Source: Sophos State of Ransomware, 2024

How one small change cascades

TRIGGER

Admin deletes a group

500 users lose access
20 apps become unreachable
Help desk floods with tickets
Sales team can't close deals
TRIGGER

MFA policy typo

Entire workforce locked out
CEO can't access email
Customer meetings missed
Emergency IT scramble begins
TRIGGER

Compromised admin account

Rogue apps created silently
Access policies weakened
Data exfiltration window opens
Compliance audit fails
Industry-Leading Coverage

One Platform. Eleven Providers.

Butterfly Security backs up Okta, Entra ID, Auth0, Ping Identity, 1Password, Workato, Boomi, Zapier, Google Workspace, Slack & Salesforce from a single dashboard.

Okta

34 types

Entra ID

12 types

Auth0

10 types

Ping Identity

11 types

1Password

2 types

Workato

15 types

Boomi

17 types

Zapier

9 types

Google Workspace

9 types

Slack

7 types

Salesforce

19 types

Why Identity Backup Matters

Most identity platforms don't offer native point-in-time backup or restore. One accidental deletion—a group, a policy, a Workflows folder—can cascade across your organization. Without snapshots, recovery means hours of manual work. Butterfly Security captures everything automatically.

NEW: AI_AGENT_SECURITY

Secure Every AI Agent in Your Org

Discover shadow AI, monitor agent behavior, enforce policies, and manage credentials — plus the backup & recovery that no competitor offers.

Discovery

Find every AI agent across all connected identity platforms

Monitoring

Real-time activity tracking & anomaly detection

Policies

Guardrails, least privilege, auto-shutdown

Credentials

Secret rotation & lifecycle management

Get Started Free

Get Started Today

The most comprehensive identity backup & security platform available.

Supported Platforms:

Okta
Microsoft Entra ID
Auth0
Ping Identity
1Password
Workato
Boomi
Zapier
Google Workspace
Slack
Salesforce

Production orgs: Contact us for early access

145+

Resource Types

Full

Okta Workflows Backup

Terraform

HCL Export

6+

Compliance Frameworks

Comprehensive backup coverage

Butterfly Security captures your entire configuration—users, apps, policies, recipes, connections, and more—across all 11 supported providers. Select exactly what you need to backup or restore.

Identity & Directory

  • Users, Groups & Memberships
  • Roles & Role Assignments
  • Administrative Units & Populations
  • Schemas & Profile Mappings

Applications

  • SAML, OIDC & Native Apps
  • App Registrations & Service Principals
  • OAuth Clients & API Resources
  • App Assignments & Permissions

Security & Policies

  • Sign-on, MFA & Password Policies
  • Conditional Access Policies
  • Network Zones & Named Locations
  • Authorization Servers & Rules

Workflows (Okta)

  • Flow Definitions & Cards
  • Folders & Organization
  • Table Data (CSV Export)
  • Connector Builder Projects

Advanced (Okta)

  • Identity Governance (OIG)
  • Privileged Access (PAM)
  • Device Assurance
  • Realms & Agent Pools

Configuration

  • Branding, Themes & Domains
  • Email Templates & Tenant Settings
  • Authenticators & Gateways
  • Certificates & Organization Settings

Diff & Monitor

  • GitHub-Style Change Diff
  • Configuration Drift Detection
  • Environment Comparison
  • Scheduled Automated Backups

Export & Compliance

  • Terraform HCL Generation (Okta)
  • Git Export (All Providers)
  • Compliance Checks (SOC2, HIPAA)
  • Environment Sync Planning

Intelligence

  • Unified Identity Graph (11 providers)
  • IAM Chaos Engineering & Simulation
  • Cross-Provider Inconsistency Detection

Restore with confidence

Our dry-run feature shows you exactly what will change before making any modifications. No surprises, no guesswork—just a clear preview of every create, update, and skip.

1

Backup

Capture your entire identity configuration across all providers. Runs daily, weekly, or on-demand.

2

Dry Run

Generate a restore plan showing exactly what would change. No modifications made.

3

Execute

Confirm to apply changes. Deletes disabled by default for extra safety.

Stop the cascade before it starts

One change shouldn't cost you revenue, security, or productivity. Butterfly Security captures everything, spots dangerous changes, and helps you recover fast.

140+ Resource Types

Complete coverage across 11 providers: users, groups, apps, policies, vaults, recipes, processes, zaps, and more.

11 Providers

One platform for Okta, Entra ID, Auth0, Ping Identity, 1Password, Workato, Boomi, Zapier, Google Workspace, Slack, and Salesforce. Connect any combination.

Infrastructure as Code

Terraform HCL export for providers with official Terraform support (Okta, Entra ID, Auth0, Ping Identity), plus Git repository integration for all providers.

Git Integration

Export backups to GitHub, GitLab, Bitbucket, or Azure DevOps for version control and audit trails.

Compliance Checks

Built-in checks for SOC2, HIPAA, PCI DSS, NIST, and ISO 27001 compliance requirements.

GitHub-Style Diff

Visual change detection shows exactly what changed between backups with line-by-line comparison.

Request Access

Free during beta. No credit card required.

Real recovery scenarios

These situations happen more often than you'd think. Without backups, recovery means hours of manual work—if you can even identify what changed.

Accidental Deletion

A group with 500 members gets deleted. User assignments to 20 apps gone. Restore in minutes instead of hours.

Bad Policy Change

A MFA policy update locks out all users. Diff shows what changed. Restore the previous policy instantly.

Security Incident

Compromised admin creates rogue apps. Identify all changes with drift detection, then restore.

Compliance Audit

"What changed in 90 days?" Daily backups provide complete change history for auditors.

Automation Disaster

Someone deletes a critical Okta Workflow, Auth0 Action, or automation rule. No provider offers native backup. Restore from yours.

Sandbox Sync

Need to replicate production config to test? Export backup to understand differences.

Frequently asked questions

Do identity providers offer native backup?

Most don't. Okta, Entra ID, Auth0, and Ping Identity all operate under a shared responsibility model with no built-in backup or restore.

Is my data safe?

Yes. Your backups are encrypted at rest and isolated per account. We use industry-standard security practices.

What advanced features do you back up?

Okta Workflows (flows, tables, connectors), Entra ID Conditional Access policies, Auth0 Actions & Rules, Ping Identity sign-on policies, 1Password vaults & items (read-only), and more.

Which providers support restore?

Okta, Entra ID, Auth0, and Ping Identity support restore. 1Password is backup-only due to API limitations. Workato, Boomi, Zapier, Google Workspace, Slack, and Salesforce support backup with restore coming soon.

How long does a backup take?

It depends on org size and provider rate limits. Small orgs (under 100 users): 2-5 min. Medium (100-1,000 users): 10-20 min. Large (1,000-5,000 users): 20-45 min. Enterprise (5,000+ users): 45 min to 2+ hours. Nested resources like group memberships and app assignments require sequential API calls, and provider rate limits (e.g., Okta's 600 req/min) add natural pacing.

Can I restore to a different environment?

Yes, with caveats. Backups use name-based matching so they're portable across environments.

What about user passwords?

Passwords, MFA enrollments, and session data cannot be backed up via any API. Users must reset after restore.

Which identity platforms do you support?

We support Okta, Microsoft Entra ID (Azure AD), Auth0, Ping Identity (PingOne), 1Password, Workato, Boomi, Zapier, Google Workspace, Slack, and Salesforce. Connect any or all of them from a single dashboard.

What regions do you support?

During the beta period, support is best-effort across all regions. Entra ID, Auth0, and Ping Identity work across regions. Okta is currently tested against US-based orgs. We're expanding regional coverage as we approach general availability.

Can I backup my production environment?

You can connect production environments, but please be aware the service is currently in beta. We strongly recommend thorough testing in a sandbox first. Production use is at your own risk, with no guarantees of completeness or availability. See our Terms of Service for details.

Your data stays secure

  • Encrypted at rest with AES-256
  • Isolated storage per account
  • Credentials encrypted separately
  • SOC 2 Type II certified hosting providers
Learn more about security

Join the Early Access Program

We're partnering with forward-thinking organizations to build the definitive identity backup & security platform. Get in early and help shape the product.

What you get:

  • Full access to all backup features
  • 11 platforms (Okta, Entra ID, Auth0, Ping, 1Password, Workato, Boomi, Zapier, Google Workspace, Slack, Salesforce)
  • Workflows & automation backup (Okta, Workato, Boomi, Zapier)
  • Terraform HCL export (Okta, Entra ID, Auth0, Ping Identity)
  • Git export (GitHub, GitLab, Bitbucket, Azure DevOps)
  • Compliance checks (SOC2, HIPAA, PCI DSS)
  • Scheduled automated backups
  • Real-time backup monitoring
  • GitHub-style configuration diff
  • Direct access to the development team

What we ask:

  • 1Share feedback on your experience
  • 2Report any issues you encounter
  • 3Help us understand your backup needs

Free during beta. No credit card required.

Get in Touch

hello@butterflysecurity.org

Protect your revenue, security, and productivity

One misconfiguration can cascade into disaster. Start protecting your identity infrastructure in minutes.

Free trial available · 11 providers supported

Or explore the interactive demo without signing up