Skip to main content

Organization Portal

The organization portal is separate from the console, where the analysis screens live, and gathers settings that apply to the organization (tenant) as a whole. Company details, members and invitations, your own account, notifications and subscription are managed here.

It shares its sign-in session with the console, so you do not need to sign in again. You can get there from the Open the portal link on the console's Settings > Organization tab, and click Back to console at the top of the portal to return to the console.

The top of the portal shows the organization name (or its logo, if one is set) and your username and email; admins get an Admin badge. Use the Sign out button at the far right to sign out.

1. Menu​

MenuDescriptionVisible to
HomeOrganization overview, getting-started steps, organization name and logoEvery member
MembersMember list and roles, invitations, auditor accessEvery member (inviting and changing roles is admin-only)
EvidenceSigned evidence packages (see Evidence Package)Admins, auditors
Data LocationThe tenant data location report (see Data Location)Admins, auditors
AccountYour profile, password and signed-in devicesEvery member
NotificationsHow you receive notifications, organization notification channelsEvery member (notification channels are admin-only)
SubscriptionPlan and billing (see Subscription)Every member

Menus not included in your subscription plan (for example Evidence or Data Location) are not hidden; they stay in place with a Locked marker. Opening one shows a notice that it is not included in your plan, with a link to the subscription page.

2. Home​

This is the first page you see when you enter the portal. At the top are Welcome, <username> and an Open console button.

2.1. Summary cards​

  • Plan – the current plan name and subscription status (for example Active). If the plan details cannot be loaded, the card says so.
  • Members – the number of members in your organization and a Manage members link
  • Your role – your role (Admin, Editor, Viewer or Auditor) and an Account settings link

2.2. Getting started​

Shows the things to do when first setting up your organization, in four steps.

StepButtonGoes to
Connect your AWS accountOpen consoleThe console (AWS connections are set up in Project Settings)
Invite your teamInviteMembers
Set up notificationsConfigureNotifications
Complete your profileEditAccount

Invite your team changes to Done once your organization has two or more members. The other steps do not track completion automatically, so their buttons stay in place.

The Organization card at the bottom of the page shows your organization's logo and name. Only admins can change them.

  • Upload logo / Replace logo – choose an image file to upload as the logo. Only image files, up to 1 MB, are accepted. Remove deletes the logo.
  • Edit name – edit the organization name. Press Enter or the confirm button to save, and Esc or the cancel button to revert.

The name and logo you change here are reflected at the top of the portal right away.

3. Members​

Manage your organization's members and pending invitations.

3.1. Roles​

RoleWhat it can do
AdminFull access — manage members, invitations and organization settings
EditorView and edit. Cannot manage members
ViewerRead-only
AuditorRead-only access to specific connections, until a set date. Managed through access grants, not the role selector on this menu (see Auditor)

3.2. Team members​

Your organization's members are shown in a table (Member, Status, Role). Member shows the username and email, your own row is marked (you), and Status is Active or Inactive.

  • Admins can change a member's role to Admin, Editor or Viewer using the selector in the Role column. The change is saved immediately and a <user> is now <role> notification appears.
  • You cannot change your own role.
  • An auditor's role cannot be changed here; admins see Access until <date> or No active access next to it.
  • Non-admins see roles as badges only, with the note Only an admin can change roles.

3.3. Invitations (admins only)​

Invite new members.

  1. Enter the invitee's email address in Email.
  2. Choose a role in Role (default Viewer). A description of the chosen role is shown below the form.
  3. Click Send invite. An invitation email is sent and an Invitation sent to <email> notification appears.
  4. The Invitation created dialog then shows the accept link. You can copy it with the copy button and pass it on yourself. The link is tied to the email you entered.

The invitee creates their account by choosing a username and password on the Set up your account screen opened from the email or link. The screen and password requirements are the same as in account setup in Getting Started.

The invitation list has Email, Role, Status, Expires and Actions columns.

  • Status is one of pending, accepted, revoked or expired.
  • A pending invitation can be cancelled with Revoke.
  • If there are no invitations yet, No invitations yet. is shown.

Auditors are not invited with this form but with the Invite auditor card further down the same page. For inviting auditors and granting, extending and revoking their access, see Auditor.

4. Account​

Manage your profile and sign-in details. Every member can use this page for their own account.

4.1. Profile​

Edit Username and Email, then click Save changes. The button stays disabled while nothing has changed.

4.2. Password​

Clicking Change password takes you through two steps.

  1. Confirm your identity – enter your current password in Current password and click Continue. If it is wrong, Current password is incorrect. is shown.
  2. Set a new password – enter New password and Confirm new password, then click Change password. While you type the new password, each of the following requirements is checked off as it is met.
    • At least 8 characters
    • An uppercase letter
    • A lowercase letter
    • A number
    • A symbol
    • It must differ from your current password.

Changing your password ends every sign-in session, including this one, and takes you to the sign-in screen with the notification Password changed. Please sign in again. Sign in again with the new password.

4.3. Security (signed-in devices)​

The devices you are currently signed in on are listed by browser and operating system (for example Chrome · macOS) and last use (Last active). The device you are using now is marked This device.

  • Click Sign out next to another device to sign out of that device only.
  • Click Sign out of all devices and then Sign out everywhere in the confirmation dialog to end every session, including this one, and go to the sign-in screen.

5. Notifications​

Choose how you receive notifications. The two cards at the top apply to you only; the Notification channels card at the bottom is an admin setting that applies to the whole organization.

5.1. Channels​

Turn whole delivery methods on or off.

  • Email – send notifications to your email address.
  • In-app – show notifications inside the product.

5.2. By category​

Turn email and in-app notifications on or off per notification type. Values set here override the Channels defaults above. Notification types include Critical risk findings, Scan completed and Daily digest summary; this card is shown only when your account has such entries.

Changes to Channels and By category are saved only when you click Save settings.

5.3. Notification channels (admins only)​

Send notifications additionally to a Slack channel, a webhook, or a daily email digest. Separately from Save settings above, each channel is saved right away.

To add a channel, choose a Kind, fill in its fields and click Add channel.

KindFields
SlackSlack incoming webhook URL, Minimum severity
WebhookWebhook URL, Minimum severity
Daily email digestHour (00:00–23:00), Time zone
  • Webhook URLs must start with https://.
  • Only notifications at or above the Minimum severity (Info, Low, Medium, High, Critical) are sent to that channel.
  • The Daily email digest is sent once a day at the set time and summarizes everything that wasn't sent immediately, regardless of severity.

Added channels are shown in a table with Kind, Target, Min severity and Enabled columns.

  • Use the Enabled switch to turn a channel off or on without deleting it.
  • Use Edit to change its settings. For security, a stored webhook URL is shown masked to its host and is never shown in full again. Leave the URL field blank to keep the current URL, or enter the full URL to replace it.
  • Use Delete to remove a channel.
  • If there are no channels, No notification channels yet. is shown.

Non-admins see only the note Ask an organization admin to set up notification channels. on this card.

To silence notifications from one project only

If you only want to pause notifications coming from a single project, use the mute setting on the console's Project Settings > General tab instead of this page.