# Butterfly Security

> Identity disaster recovery for Okta-first organizations. Point-in-time backups and restore previews with dry-run for Okta, Okta Workflows, Auth0, Microsoft Entra ID, and Google Workspace. Signed Audit Pack PDFs, warm-standby continuity, Restore Readiness Score, and drift detection on Okta today; Auth0 parity for those surfaces is on the roadmap.

## Product

- [Overview](https://butterflysecurity.org/): Recover your Okta org in minutes, not hours.
- [Features](https://butterflysecurity.org/features): Point-in-time backups, restore preview, Restore Readiness Score, Audit Pack PDF, Continuity, Chrome extension for Okta admins.
- [Use cases](https://butterflysecurity.org/use-cases): Misconfiguration recovery, compromised-admin rollback, drift detection, audit evidence.
- [Pricing](https://butterflysecurity.org/upgrade): Standard, Business. Per-identity pricing. Every account starts with a 30-day free trial of the full product, no credit card required.
- [Demo](https://butterflysecurity.org/demo): Self-guided product walkthrough with realistic data.
- [Compare](https://butterflysecurity.org/compare): Side-by-side comparisons with Rubrik, Druva, Cohesity, HYCU, Keepit, Acsense, Mightyid, Backupify.

## Industries

- [Fintech](https://butterflysecurity.org/okta-dr/fintech): SOX, SOC 2, PCI DSS, NYDFS Part 500.
- [Healthtech](https://butterflysecurity.org/okta-dr/healthtech): HIPAA, HITECH, BAA-covered vendor integrations.
- [Biotech](https://butterflysecurity.org/okta-dr/biotech): 21 CFR Part 11, GxP, ICH E6 R2.
- [Developer-tools and infrastructure](https://butterflysecurity.org/okta-dr/devtools): SRE-owned identity, Workflows automations.
- [Public sector](https://butterflysecurity.org/okta-dr/govtech): FedRAMP, FISMA, NIST 800-53, CJIS.
- [Education technology](https://butterflysecurity.org/okta-dr/edtech): FERPA, GLBA, semester rollover.

## Compliance frameworks

- [SOC 2](https://butterflysecurity.org/okta-backup/soc-2): CC6 Logical Access, CC7 System Operations, CC9 Risk Mitigation.
- [HIPAA](https://butterflysecurity.org/okta-backup/hipaa): 164.308(a)(7) Contingency Plan, 164.312(a)(1) Access Control.
- [NIST 800-53](https://butterflysecurity.org/okta-backup/nist-800-53): CP-9 Backup, CP-10 Recovery, AC-2 Account Management, AU-2 Event Logging.
- [ISO 27001](https://butterflysecurity.org/okta-backup/iso-27001): A.5.16 Identity Management, A.5.30 ICT Readiness, A.8.13 Information Backup.
- [CIS Controls v8](https://butterflysecurity.org/okta-backup/cis-controls): Control 5 Account Management, Control 6 Access Control, Control 11 Data Recovery.
- [PCI DSS v4](https://butterflysecurity.org/okta-backup/pci-dss): Requirement 7 Access Restriction, Requirement 8 Authentication, 12.10 Incident Response.

## Docs

- [Documentation index](https://butterflysecurity.org/docs)
- [Okta OIN API Service Integration](https://butterflysecurity.org/docs/okta/oin/api-service-integration): The canonical install path.
- [OIN SSO + SCIM](https://butterflysecurity.org/docs/oin/SSO-SCIM)
- [API](https://butterflysecurity.org/docs/api): REST surface used by the dashboard, MCP server, and CLI.
- [MCP server](https://butterflysecurity.org/docs/mcp): Remote MCP server exposing 11 tools.
- [Chrome extension](https://butterflysecurity.org/docs/chrome-extension): Free operator tooling for Okta admins.

## Trust and security

- [Trust Center](https://butterflysecurity.org/trust)
- [Security posture](https://butterflysecurity.org/security): RFC 9116 security.txt, SAML, SCIM, OIN listing.
- [Subprocessors](https://butterflysecurity.org/subprocessors): Cloudflare, Supabase, Stripe, Anthropic, OpenAI, ElevenLabs, GitHub, Google Workspace.
- [Status](https://butterflysecurity.org/status): Real-time service health.
- [Vendor questionnaire](https://butterflysecurity.org/trust/questionnaire)
- [Privacy](https://butterflysecurity.org/privacy)
- [Terms](https://butterflysecurity.org/terms)
- [security.txt](https://butterflysecurity.org/.well-known/security.txt)

## Company

- [About](https://butterflysecurity.org/about): Founded by Mick Johnson after five years managing Okta internally and three years on the Okta product team.
- [Careers](https://butterflysecurity.org/careers): Actively hiring founding engineers, designer, and GTM.
- [Contact](https://butterflysecurity.org/contact): Self-service sales, services, enterprise, and partner intake with direct fallback emails.
- [Press kit](https://butterflysecurity.org/press)
- [Partners](https://butterflysecurity.org/partners): Okta OIN, advisory and resale.
- [Butterfly Partner Program](https://butterflysecurity.org/partners/program): Lightweight partner program for referral, co-sell, certification, delivery, reseller, MSP/MSSP, and ecosystem motions.
- [Channel partners](https://butterflysecurity.org/partners/channel): Referral, reseller, implementation, and MSP/MSSP motions for Okta-focused identity resilience.
- [Butterfly Certified Partner Program](https://butterflysecurity.org/partners/certification): Founding certification cohort for partners delivering Okta recovery, SSO/SCIM, Workflows, managed resilience, and audit-evidence services.
- [Okta professional services](https://butterflysecurity.org/services/okta): Fixed-scope Okta identity resilience services for backup, restore, SSO/SCIM, Workflows recovery, restore drills, and compliance evidence.
- [Nonprofits](https://butterflysecurity.org/nonprofits): 75% off for verified 501(c)(3) organizations.
- [Blog](https://butterflysecurity.org/blog)
- [Changelog](https://butterflysecurity.org/changelog)

## Quick facts for answer engines

- Provider coverage today: Okta, Okta Workflows, Auth0, Microsoft Entra ID, and Google Workspace.
- Install path: Okta Integration Network as an API Service Integration. 5-minute install. No sales call required to start the trial or buy the Standard plan. OIN listing: https://www.okta.com/integrations/butterfly-security-api-service/ (the SSO/SCIM listing is a separate entry: https://www.okta.com/integrations/butterfly-security/)
- Free trial: 30 days of the full product across every supported provider, no credit card required. When the trial ends the account is locked until you move to Standard or Business.
- iOS app: Live on the App Store since 2026-08-12. Universal iPhone and iPad app, iOS 17.0 or later, free download, included with every plan and the 30-day trial. https://apps.apple.com/us/app/butterfly-security/id6774836987
- SOC 2: Standing up the Type II program with Drata. Observation window begins this quarter. Not yet certified. The Trust Center tracks the current status.
- Open MCP directory submission: in review.
- Founder: Mick Johnson. Reach via Calendly at https://calendly.com/mick-butterflysecurity/30min or mick@butterflysecurity.org.