Security & Compliance
Who is calling, what they may do, and what has to be recorded: authentication, authorization, audit, secrets and certificates, and the checks that keep input and dependencies safe.
Capabilities
Recording who touched personal or sensitive data, for auditors
Handling personal data the way the law requires
Checking an uploaded file before anyone can download it
Rotating credentials without downtime or redeployment
Establishing who is calling and making that identity available
Deciding who may read or change what, down to instance level
Keeping a readable business history of changes to a record
Rejecting bad input before it reaches a handler
Capping requests per tenant or caller
Finding known vulnerabilities in an app's open-source dependencies
Recent changes
All changes →Change tracking core coverage reassessed
Rate limiting core coverage reassessed
Secrets rotation coverage reassessed
Vulnerability scanning now mapped on this door
Authentication now mapped on this door
Input validation now mapped on this door