CNCF-hosted Co-located Events Europe 2025

Backstage is now an essential platform for software development, but how do you track critical events like logins, data access, and configuration changes? How do you categorize these events by severity or ensure you're capturing all the necessary information for analysis? This talk introduces Backstage's Auditor, a new core service designed to answer these questions and enhance the security of your Backstage platform. We'll explore its key features: capturing a wide range of security-relevant events, categorizing them by severity, capturing rich metadata for analysis, tracking the outcome of operations, and integrating with Backstage's authentication and plugin system. We'll also dive into the flexible configuration options for directing log output and showcase how these features work in a real-world scenario. This talk equips platform engineers and Backstage developers with the knowledge to enhance security, meet compliance, and gain deeper insights into their platform's activity.