Accounts and organizations
Everything belongs to an organization: sites, scans, findings, credits and people. Here is how that fits together.
You sign up as a person and land in an organization. The organization owns the sites, the scans, the findings, the plan and the credit balance; people are invited into it with a role. Every query in the product is scoped to one organization, which is what keeps two customers’ data apart.
- 1Create the account
Email and password. The address is verified before the account can do anything that matters.
- 2Turn on two-factor authentication
TOTP with recovery codes, from Account → Security. Do this before you invite anyone else.
- 3Add your first site
A site is one application: a hostname, its scan policy, its history and its repositories.
- 4Invite the people who need it
Owner, admin, member or viewer. Invitations expire, and every invite is written to the audit log.
The 14-day Pro trial is granted to an organization, not to a person, and can only be taken once.
Questions
Can one account belong to several organizations?
Yes. You are invited into each one separately and switch between them in the app; your role can differ in each.
Who can see my findings?
Only people in the organization that owns the site, according to their role. Nothing is shared between organizations, and every read is scoped by the organization on the way in.
What happens to my data if I delete my organization?
Its sites, scans, findings, reports and facts go with it. Ask support if you want a copy exported first.
Something here wrong, missing or out of date? Tell us and we will fix the page.