Ctadel

Settings

The Settings page is the configuration hub of your tenant. Six sub-tabs.

General

  • Project name and short identifier.
  • Default email for compliance reports.
  • Compliance frameworks toggle (which frameworks to surface in dashboards).
  • Risk-weight overrides (Admin).
  • Copilot enable / disable.

Cloud Providers

One section per cloud provider. Each section lets you:

  • Connect a new account with the wizard described in Connect your first cloud account.
  • Test credentials with a read-only API call to confirm permissions.
  • Edit / disconnect an existing connection. Disconnection stops scanning; existing findings remain.

Each connection lists when it was last scanned and how many resources are tracked.

Kubernetes

For each cluster:

  • The kubeconfig or service account token used to connect.
  • The list of namespaces being scanned (defaults to all; you can exclude).
  • The cluster's discovered metadata (version, node count, CNI, public/private API).

Ticketing

Configure outbound integrations for ticketing systems. Currently:

  • Jira: server URL, API token, project key, default issue type, severity → priority mapping.
  • GitHub Issues: org / repo, token, label rules.
  • Linear: workspace, API key, team key.

When configured, every CRITICAL / HIGH finding can optionally auto-create a ticket. The mapping rules are configurable.

Connectors / Notifications

This is where you configure where alerts go.

  • Slack: incoming webhook URL, channel routing.
  • Email: recipients, daily / weekly digest schedule.
  • Generic webhooks: URL, optional shared secret for signing, payload format.
  • Per-rule routing: route specific severities to specific channels (e.g. CRITICAL → on-call PagerDuty webhook, HIGH → Slack #sec-alerts).

See Set up Slack, email, or webhook alerts.

Git

  • Repository connections for IaC scanning (GitHub, GitLab, Bitbucket).
  • Webhook URL to copy into your git provider.
  • Per-repo scan rules (which paths to scan, which severity threshold fails CI).

See Scan IaC from a Pull Request.

Users & Roles

The tenant-wide tab.

  • Users: list of all members, with email, status, and role.
  • Invite member: create a new user, send invite email.
  • Edit assignments: change a user's role.

Only Admin can add or remove users.

What's next