Falcon Syslog
Evidence platform. All access is logged.

Local account. No SSO, by design: this platform stays reachable even if the identity plane it logs is unavailable.