Docs
Organizations
Roles, invites, the audit log and deleting your account.
Organizations
Repositories, findings, swarm runs and credits belong to an organization. You get a personal one when you first sign in, and join others by invitation. Switch between them from the account menu.
Roles
| Role | Can |
|---|---|
| Viewer | Sees repositories, scans, findings, swarm runs and the dashboard. |
| Member | Also starts scans and swarm runs, triages findings and asks for explanations and fixes. |
| Admin | Also connects providers, imports and archives repositories, turns auto-scan on and off, sets policies, manages members and invites, and reads the audit log and credit usage. |
| Owner | Also changes the plan, pays, buys credit packs and sets spend caps. |
Removing someone or lowering their role applies at once to anything they try to change. An organization always keeps at least one owner, and only owners change another owner's role.
Invites
Admins invite people by email, with a role, under Settings, Organization. An invite lasts seven days and works only for someone signed in with that verified email address, so a forwarded link is useless to anyone else.
Audit log
Admins see who did what, and when, under Settings, Audit log, filtered by action and dates. On Team and Enterprise they can export it as CSV, up to 366 days at a time.
Archiving a repository
Admins archive a repository from its Settings tab. Scanning stops at once and its webhook is removed; the repository and its findings are deleted 30 days later.
Deleting your account
Delete your account under Settings, Profile. You are signed out everywhere and your provider tokens are revoked at once; your user record is removed after 30 days. If you are the only owner of an organization shared with others, make someone else an owner first.