Platform / Security suite
See risky identities, and act on them everywhere.
Identity threat protection, security posture management and privileged access are all part of the platform.
Risk raised toHigh
- IdRa sessions and refresh tokensEnded
- Apps with OIDC back-channel logoutTold
- Connected Google, Microsoft, Okta, Slack or Zoom tenants, once switched onSigned out
- Custom apps with a revocation endpointRevoked
- Shared Signals receiversNotified
Identity Threat Protection
Detections raise a person’s risk. Your entity risk rules choose the response: notify, ask for MFA again, end the session, run Universal Logout or suspend.
- Universal Logout to OIDC apps, custom revocation endpoints, and Google, Microsoft, Okta, Slack Enterprise Grid and Zoom tenants once switched on
- Session hijack detection, and risk that decays on a schedule
- Shared Signals as both transmitter and receiver, with CAEP and RISC events
Identity security posture
Connect your SaaS and cloud accounts to find what your identity provider can’t see, then fix it with confirmed actions or send a ticket.
- Connectors for GitHub, Google Workspace, Microsoft 365, AWS IAM, Salesforce, Slack, Okta, Atlassian and Zoom
- Findings for missing MFA, orphaned accounts, stale credentials and risky OAuth grants (MFA isn’t read from Salesforce or Zoom)
- Fixed attack-path patterns, scored findings, and Jira or ServiceNow tickets
Privileged access
Replace long-lived SSH keys with short-lived certificates issued after MFA, and keep shared secrets in an encrypted vault.
- SSH certificates that last 10 minutes at most, through the idra CLI
- A vault with group-scoped reveal and an access log
- Time-limited access requests with an approver
Standards it speaks
- SSF
- CAEP
- RISC
- RFC 8935 and 8936
- OpenSSH certificates
Not here yet
- Session recording, RDP and account password rotation: not planned today
- Access certifications, entitlements and separation of duties
- SaaS connectors have run against fixtures, not live vendors
We’d rather you read this now than find it in a pilot. See the full comparison.
Create your organization.
Pick an address and confirm your email, then sign in as its first admin. A setup wizard takes you through the rest.