Settings
Everything your technical team needs to configure and tune the platform, in one place. Changes are scoped to your organization, authorized by your role, and written to the audit trail.
Identity & access
Decide who can sign in and what they can do. Wire up your IdP, then manage roles and provisioning yourself.
Single sign-on (SAML / OIDC)
Federate logins with your identity provider. Group-to-role mapping and MFA enforcement are honored at every login.
Requires the “sso.manage” permission.Two-factor authentication (TOTP)
Add an authenticator-app code as a second factor on top of SSO. Enrol via QR; a code is required at every sign-in once enabled.
Set up 2FARoles & permissions
Create custom roles from a catalog of fine-grained permissions. Built-in roles stay protected.
Requires the “roles.manage” permission.Automated provisioning (SCIM 2.0)
Let your IdP create, update and deactivate users automatically. Deactivation revokes sessions and tokens at once.
Requires the “scim.manage” permission.Exposure & scanning
Authorize what you may scan, then tune how deep each scan goes. Scope is enforced at dial time, every time.
Authorized scope
Attest the IP ranges and domains you are permitted to scan, with an owner reference and expiry. A platform denylist always wins.
Requires the “scans.scope.manage” permission.Scan depth & safety
Choose per scan how deep to go — discovery, standard or web — with safe concurrency and rate limits. No intrusive or destructive probes.
Requires the “scans.run” permission.Automation & integrations
Connect pipelines and services to the platform with scoped, auditable credentials you control.
API tokens
Mint scoped personal tokens for scripts and CI. Scopes can never exceed your own role; every token is listed and revocable.
Requires the “tokens.own” permission.Notifications
Send scan and finding alerts to your own Slack or webhooks. Destinations are encrypted; delivery is request-forgery-safe.
Requires the “notifications.manage” permission.Service accounts
Non-human identities for integrations, each bound to a role. Disabling one revokes its tokens immediately.
Requires the “tokens.manage” permission.Organization
Tenant-wide settings. Session and MFA policy are enforced centrally for every member.
Session & MFA policy
Idle and absolute session timeouts and MFA requirements for the tenant. Applied to every member and integration.
Per-tenant session policy is managed centrally; in-UI tuning is planned.