The platform foundation.
Already included.
Core handles authentication, identity, subscription management, payment processing, REST API access, and enterprise webhooks. It's included at no extra cost with every Forge or Cortex subscription.
🔷 Core is not sold separately. It's the shared foundation that makes all Galvafy products work together.
CORE CAPABILITIES
Everything your platform needs.
Auth & Identity
Microsoft OAuth, Google OAuth, and custom email/password SSO. Single sign-on across all Galvafy products with one identity provider.
Subscription Engine
PCI-compliant payment processing and subscription entitlement management. Handles free, pro, and enterprise tiers with per-seat and usage-based billing.
REST API
Full REST API with OpenAPI specification. Query identity, entitlements, tasks, and platform events programmatically. SDK libraries for Node.js and Python.
Enterprise Webhooks
Reliable, retrying webhook delivery for all platform events. Subscribe to identity changes, entitlement updates, task completions, and custom workflow events.
SOC 2 Type II
SOC 2 Type II certified security controls covering availability, confidentiality, and processing integrity. Enterprise security baked in from the start.
Usage & Audit Logs
Full audit trail of all platform activity, authentication events, API calls, and entitlement changes. Exportable logs for compliance and SOC 2 evidence.
CORE API
Built for developers.
Query identity, entitlements, tasks, and webhooks with a clean REST API. Every endpoint is versioned, documented, and available to all Galvafy subscribers.
View full API reference →Core comes with every subscription.
Start with Forge or Cortex — Core is already included.