Roles and permissions
Owner, admin, security manager, analyst, developer, viewer and billing admin, each with explicit permission strings enforced by the API.
Enterprise
Security posture for many assets, teams and stakeholders
Role-based access, mandatory MFA, org-scoped audit logs and reports you can hand to leadership — with an honest list of what is not available yet.
Available now
Built for organizations from day one
MFA enforcement
Owners can require TOTP for every member; access is blocked until enrolled. Recovery codes, session management and sign-out-everywhere included.
Audit trail
Append-only audit log of every significant action with actor, IP, request id and metadata, visible per organization and filterable by actor, action and date.
Authorization records
Every active scan is backed by a signed confirmation stored with identity, IP, browser, timestamp and scope.
Multiple organizations
Users can belong to several organizations and switch between them; data is isolated with row-level security in the database.
Not available today
What we do not offer yet
Listed so you can plan; none of these are available today.
- Single sign-on (SAML / OIDC)
- Authenticated scanning with explicit scoping
- Private scanner agents and multi-region scanners
- Compliance-oriented reporting
- Advanced RBAC
Let's talk
Let's talk about your estate.
Tell us how many assets and teams you have and we will help you plan a rollout.
TasScan is invite-only right now. Request an invite and we will be in touch.