ChangeSentry

ChangeSentry is a web app (with optional Slack/Teams and SIEM integrations) that monitors security-relevant changes across your environment and turns them into actionable, low-noise signals. Instead of trying to out-alert your SIEM, it focuses on the moments that actually create incidents: new admin grants, MFA policy edits, firewall rule changes, new OAuth apps, endpoint security agent tampering, and critical cloud IAM modifications. It continuously snapshots configuration and identity states from sources like Okta/Azure AD, AWS, Google Workspace, and popular EDR tools, then correlates changes with user context (role, typical behavior, geo/IP) and change windows (approved maintenance). The product is brutally pragmatic: it won’t “detect everything,” but it will reliably surface the top 1% of changes that drive real breaches. It includes an audit trail, simple approvals, and one-click rollback guidance playbooks for common platforms.