PostHog

How engineers build better products

Product & Design

Compliance Certifications GDPR CCPA SOC2

Server Location United States

About PostHog

An open source product analytics platform that combines event tracking, session replay, feature flags and experimentation in a single tool. Used by product teams and software engineers to understand user behavior, monitor usage and validate changes with dashboards, funnels and experiments. It holds user interaction data and possibly session recordings, so controlling access and applying privacy safeguards is essential to protect sensitive information.

What Cakewalk Does With PostHog

Govern access to PostHog across the projects and assets your team builds in it. Cakewalk syncs everyone with access to PostHog and what each person can do, then grants and removes that access automatically. AI agents can also act inside PostHog, checked against policy on every call.

Integration Capabilities

Access Sync

Cakewalk continuously reads who has access in PostHog and at what level, then reconciles it against your directory of record. Out-of-band and orphaned access is surfaced for review.

Auto Provisioning

Cakewalk provisions and removes PostHog access automatically. When someone joins, changes roles or leaves, their access is granted, adjusted or revoked without a ticket.

Agent Connection

A Connection lets an AI agent act in PostHog through Cakewalk instead of with its own API key. The agent operates with the permissions of the person who made the request, only for the duration of that task. Every call is checked against policy and written to the audit log.

Use Cases

Use Case	Description
A Live Picture of Who Has Access Access Sync	Cakewalk continuously reads who has access in PostHog and at what level, so the list is current instead of a stale export.
Access That Slipped Through Access Sync	When access is granted in PostHog outside of policy, the next sync surfaces it for review, so orphaned and out-of-band accounts do not pile up.
Day-One Access Without a Ticket Auto Provisioning	When a new hire starts, Cakewalk provisions their PostHog access from policy on day one, with no ticket and no SCIM required.
Access That Follows the Person Auto Provisioning	When someone changes teams or leaves, their PostHog access is updated or removed automatically, so it always matches their role.
Let an Agent Handle PostHog Tasks Agent Connection	A person asks their agent to do something in PostHog, like find a record, update a field or pull a report. The agent does it through Cakewalk with that person's own access, not a shared key.
Every Action Checked and Logged Agent Connection	Every agent action in PostHog is checked against your access rules and written to the audit log. Safe actions go through, risky ones wait for approval or are blocked.