Quartz 5

Genesys Security Architecture - Overview

3 min read

appsec governance pentest

Genesys Security Architecture — Overview

Short map of how key security and governance systems relate. Detailed content lives in linked notes — this note stays brief.

System Relationships

SystemRole
Vault APISpecific internal service — manages secrets via Okta + Team ID, backed by AWS SSM Parameter Store
GForge / LoomInternal AI gateway initiative — Loom is the current chat product; the AI Gateway proxies requests to approved AWS-hosted models
SnykAutomated vulnerability / code / dependency scanning
Red Team / PentestRuntime / manual security validation
ARBArchitecture Review Board — architecture and governance compliance
GELApplication / developer governance platform — consumes security and governance signals; intended to become a deployment / security decision point
flowchart LR
    subgraph Vault Stack
        V[Vault API] --> SSM[AWS SSM Parameter Store]
        Okta[Okta] --> V
    end

    subgraph GForge Stack
        Loom[Genesys Loom] --> GW[AI Gateway]
        GW --> BR[AWS Bedrock]
        Okta --> Loom
    end

    subgraph GEL Stack
        GEL[GEL] --> Snyk[Snyk]
        GEL --> PT[Pentest / Red Team]
        GEL --> ARB[ARB]
        Snyk --> Gate[Security Decision]
        PT --> Gate
        ARB --> Gate
        Gate --> Deploy[Allow / Block Deployment]
    end

    GEL -.hosts.-> Loom
    SSM -.secret injection.-> GW

Note

These systems serve different scopes. Vault API and GForge/Loom are specific services under assessment. GEL is a broader application governance platform that may eventually consume pentest results as one input to security gating.

Vault API

Internal secrets-management API. Authentication via Okta; authorization scoped by Team ID; secrets stored through AWS SSM Parameter Store.

→ Vault API - Overview

GForge / AI Gateway / Loom

Internal AI gateway initiative. Loom is the current LibreChat-based chat interface; the AI Gateway proxies authenticated requests toward approved AWS Bedrock models. Described as deployed on GEL and consuming the Vault → SSM secret-injection path.

→ GForge - Overview

GEL (Genesys Enterprise Landscape)

Internal developer / application platform. Tracks applications, components, ownership, environments, and security posture. Integrates with Snyk, pentest status, and ARB.

→ GEL - Overview

Vault API

GForge / Loom

GEL

Graph View

Backlinks