Least privilege
Permissions such as cases:read or ioc_lists:write are granted one by one.
ACCESS Expiring, scope-limited API keys
Access Control
Issue keys for SIEM integrations and automation: name, expiry and permissions chosen one by one. The key is shown only once, at creation.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
Permissions are grouped by module: cases (read, write, export), IoC feed lists (read, write), IP feed lists (read, write) and more. Active keys are listed and can be revoked. Two-factor authentication can be enforced per tenant.
What it does
Expiry
Every key is issued with an expiry.
Shown once
The key is visible only at creation and not stored in plain text.
What you get
- A leaked key's damage is bounded by its permissions.
- Forgotten integrations close themselves when they expire.
- Audits can see who could reach what.
Other modules
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.