CAIVA.IO

Loading the estate0%
Move the cursor to tilt the estate.

Loading CAIVA.IO

Administration

The trust story a bank signs off on

Role-based access you can prove, SSO through your identity provider, a password policy, the scanner and cloud connectors your team owns, and an append-only audit log of every action.

  • 5 roles control what each person can see and change, including who may approve a pentest.
  • SSO through your identity provider, such as Okta or Entra ID, with an enforced password policy.
  • 8 connectors to your existing scanners, cloud accounts and directories, each with live status.

Access & roles

Who can do what — provable

A role-based access matrix across every module, the identity providers behind sign-in, and the audit trail — the three things a bank’s security review asks for, in one place.

app.caiva.io/administration#access

Administration

Access, identity & audit

SSO enforced
Role-based access
RoleAssetsVulnsPentestHelp DeskAdmin
AdminManageManageManageManageManage
SecOpsManageManageManageRead onlyNo access
IT agentRead onlyRead onlyNo accessManageNo access
AuditorRead onlyRead onlyRead onlyRead onlyRead only
RequesterNo accessNo accessNo accessRead onlyNo access
Manage ManageRead only Read onlyNo access No access
Identity providers
Microsoft Entra ID
SAML 2.0
active
Okta
OIDC
active
Google Workspace
OIDC
configured
Audit log · append-onlystreaming
  • 09:41a.rahmanapproved exploit validation VULN-2388
  • 07:44p.guptaadded department · Treasury Ops
  • 07:58systemconnector sync · AWS Organizations
  • 08:03j.leesigned in via Entra ID (SSO)

Scanners & connectors

The plumbing your team owns

Your existing vulnerability scanners and cloud / directory connectors feed the platform, with connection status visible — network, web and cloud scanners plus AWS, Azure, Active Directory and Entra ID.

app.caiva.io/administration#connectors

Scanners & connectors

Administration · integrations

6 of 8 connected
Vulnerability scanners
Network scannerconnected
Web app scannerconnected
Cloud posture scannersyncing
Cloud connectors
AWS Organizationsconnected
Microsoft Azureconnected
Google Cloudnot configured
Directory & AD
Active Directoryconnected
Entra IDconnected

Identity & policy

SSO, policy and the people behind it

Authentication and organisation structure, under your control.

01

Identity providers (SSO)

SAML 2.0 and OIDC against Entra ID, Okta or Google Workspace.

02

Password policy

Length, complexity, rotation and session controls, enforced centrally.

03

Teams & departments

The org structure that drives Help Desk routing and ownership.

04

Company

Tenant settings and branding for reports and the portal.

Audit logs

Every action, on the record

An append-only trail that a reviewer can trust.

01

Append-only

Entries cannot be edited or deleted — only added.

02

Actor & IP

Who did what, from where, and when.

03

Exportable

Hand the auditor the trail without a screenshot in sight.

See Administration on your estate

Tell us a little about your environment and we’ll put together a walkthrough tailored to it.

  • Agentless discovery
  • Real-world prioritisation
  • Human-gated proof
Request a demo