Security & identity

Rights clearance: check license permissions, get signed Rights Receipts, and register agents

Account management: members, invitations, roles, workspaces and subscriptions

Compliance: automate SOC 2 and ISO 27001 controls, policies, tasks, evidence and device checks

Secure access: publish private and public resources, route sites, manage users, roles and AI providers

OpenID Connect and UMA: register sites, get tokens, check access, manage logout and claims

Supply chain: discover and download SBOMs, VEX documents and attestations for products and components

Compliance: track SOC 2 and ISO 27001 controls, tasks, policies, evidence and audit findings

Security analysis: query Active Directory attack paths, entities, collectors and uploads, and manage users and tokens

Governance and datasources: manage data policies, reports, document visibility, and datasource credentials and config

Keycloak identity: manage clusters, realms, users, roles, applications and identity providers

Security automation: manage workflows, cases, agents, secrets and triggers in workspaces

Secrets management: store values, service identities, SSH CAs and approval-gated changes per project

Identity, organizations, SSO, SCIM provisioning, and team and member management for the Den control plane

Users and accounts: manage users, linked accounts, earnings, consent and webhooks across companies and widgets

Security automation: agents, alerts, detections, threat intel and hunts, with API-key access

Identity: list and remove Xero tenant connections for the signed-in user

Admin: manage users, roles, organisations, units, announcements, terms of use and MFA settings

Decentralized identity: issue and revoke verifiable credentials, manage identities, keys, schemas and QR codes

Account users, roles and teams: look up, add, change and remove users in HubSpot

Fraud scoring: risk scores for IPs, emails, phones, domains, devices and signups

Security monitoring: query events, manage machines, rules and forwarding via API

Multi-tenancy: manage organizations, members, roles, invitations, domains, identity providers and SCIM

Verify: send and check one-time codes, manage services, entities, factors and rate limits

Access control: manage apps, groups, access rules, reviews and agent activity on Opal