Feature
Catalog auditor
Deterministic findings about configuration and policy problems in catalog metadata, ranked by severity.
The auditor is a rules engine. Each finding has a stable rule id, a severity and the resource it is about, and names fields only, never a secret value.
An optional narrated explanation can be switched on by the operator. It explains the findings it is given and is joined back to the known finding ids; it never decides what is a finding.
More features
All features →- 01
Six core resources
Services, Agents, Teams, AWS accounts, Azure accounts and Labels, each with full create, read, update and delete.
- 02
Access rules on every row
A chmod-style Mode on every catalog resource: view, edit and delete bits for the owner, the owner group and everyone else.
- 03
API keys
Machine principals with read or write scope for scripts, CI and other systems.