PorticolPorticol for the whole organisation
Single sign-on, an audit trail you keep as long as you need, and a server you can run yourself.
Identity and access
Single sign-on, sign-in policy and custom roles for your organisation.
- SAML and OIDC single sign-on, required for your verified email domains, with groups mapped to roles and a break-glass owner.
- A sign-in policy: a second factor, session length, idle timeout, session limit, password length and an IP allowlist.
- Custom roles made from a fixed list of permissions.
Audit and retention
An audit log of every security-relevant and data-changing action, sent to your SIEM, kept as long as you choose.
- Every route writes an audit entry or carries a written reason why not, and a test holds that.
- Search the audit log and download it.
- Send the audit log to syslog (RFC 5424), CEF, signed webhooks or S3-compatible storage, in order and with retries.
- Owners set how long runs, monitor runs, history and the audit log are kept, within what the plan allows.
- Export everything the organisation holds as one archive, or delete the organisation.
- One console for members, groups, roles, single sign-on, policy, audit, SIEM, retention, billing and usage.
Your own server
Run the Porticol server on your own infrastructure, for one organisation.
- The same server as Porticol Cloud, run in team mode.
- Licensed per installation with a signed licence file.
- Encrypted backups on a schedule, each verified after it is written.
- Every change to the server is tested by upgrading from the previous release and rolling back.
Buying for a team
Create an account and choose Business under Billing. For a licence to run the team server yourself, or more than 100 seats, contact us. For a security review, start with the security page.