Settings
The Settings page is the configuration hub of your tenant. Six sub-tabs.
General
- Project name and short identifier.
- Default email for compliance reports.
- Compliance frameworks toggle (which frameworks to surface in dashboards).
- Risk-weight overrides (Admin).
- Copilot enable / disable.
Cloud Providers
One section per cloud provider. Each section lets you:
- Connect a new account with the wizard described in Connect your first cloud account.
- Test credentials with a read-only API call to confirm permissions.
- Edit / disconnect an existing connection. Disconnection stops scanning; existing findings remain.
Each connection lists when it was last scanned and how many resources are tracked.
Kubernetes
For each cluster:
- The kubeconfig or service account token used to connect.
- The list of namespaces being scanned (defaults to all; you can exclude).
- The cluster's discovered metadata (version, node count, CNI, public/private API).
Ticketing
Configure outbound integrations for ticketing systems. Currently:
- Jira: server URL, API token, project key, default issue type, severity → priority mapping.
- GitHub Issues: org / repo, token, label rules.
- Linear: workspace, API key, team key.
When configured, every CRITICAL / HIGH finding can optionally auto-create a ticket. The mapping rules are configurable.
Connectors / Notifications
This is where you configure where alerts go.
- Slack: incoming webhook URL, channel routing.
- Email: recipients, daily / weekly digest schedule.
- Generic webhooks: URL, optional shared secret for signing, payload format.
- Per-rule routing: route specific severities to specific channels (e.g.
CRITICAL → on-call PagerDuty webhook, HIGH → Slack
#sec-alerts).
See Set up Slack, email, or webhook alerts.
Git
- Repository connections for IaC scanning (GitHub, GitLab, Bitbucket).
- Webhook URL to copy into your git provider.
- Per-repo scan rules (which paths to scan, which severity threshold fails CI).
See Scan IaC from a Pull Request.
Users & Roles
The tenant-wide tab.
- Users: list of all members, with email, status, and role.
- Invite member: create a new user, send invite email.
- Edit assignments: change a user's role.
Only Admin can add or remove users.