Access keys you can limit and revoke

You decide how far each access key reaches. Limit a key to one product, and revoke it at any time.

A drawn keys screen with two access keys, such as "Reporting key". Each key shows the one product it is limited to and a "Revoke" button.
  • You decide how far each access key reaches.
  • A key can be limited to one product and revoked at any time.
  • The access you hand over to us is stored encrypted.

You decide how far each access key reaches. A key can be limited to one product and revoked at any time, and the access you hand over to us is stored encrypted.

What you get

You get the say over how far every key reaches, and when it ends.

An access key is a small thing with a large shadow. Whoever holds it can act in your name, and a key made for one job tends to outlive that job. It is created in a hurry, it gets copied into a script or a note, and a year later nobody can say what it opens or who still has it. Most leaders don’t lose sleep over the keys they know about. They lose it over the ones they’ve forgotten.

This ability gives you two decisions you can make for each key, and one assurance about what you give us.

A key limited to one product. You can tie a key to a single product. If your company has a web shop and a customer portal, a key meant for the shop stays with the shop. The question “what could this key reach?” gets a one-word answer: the name of the product.

A key you can revoke at any time. When a job is done, when a person changes roles, or when you simply aren’t sure any more, you revoke the key. You don’t need a reason that would convince anyone else. It is your key, and the decision is yours.

What you hand over, stored encrypted. To work on your product, we need some access from you. That access is stored encrypted. We work within the access you grant, and nothing more.

What it looks like in practice

You see a keys screen that reads like a short list, not a puzzle.

Each row is one key. Next to it, the product it is limited to. At the end of the row, a revoke action. That is the whole picture, and it is meant to be. Anyone who has to answer for your company’s access, such as your security lead, can look at it and understand it without a guide.

Keys are one part of a wider stance on access, and each part has its own page.

What you open to the work in the first place is covered in Within the access you grant. Who on your team can approve, and who can only watch, is covered in Your team, your roles. This page is about the keys themselves: how far each one reaches, and when it stops.

Through all of it, you decide what ships, and nothing reaches your users without your approval.

Where to start

Bring the list of products you would give access to, and we will walk through how the keys for each would look in a first conversation.

Start with one small first piece and judge the result yourself.

Questions leaders ask

Does every key reach all of our products?

Only as far as you let it. A key can be limited to one product, so a key handed out for your web shop has no business with your customer portal. You make that call key by key.

Someone who held a key has moved on. What can we do?

Revoke the key. You can do it at any time from the keys screen, without asking us first.

Is the access we give you kept safe?

The access you hand over to us is stored encrypted. And we work within the access you grant, and nothing more.

Is this the same as deciding who on our team can approve work?

No. Who can approve and who can only watch is set by roles, on its own page. Keys are about how far a single key reaches, and whether it still works at all.

  • Within the access you grantYou decide which parts of your systems are open to the work, and the rest stay closed.
  • Your team, your rolesYou invite your own people as owner, admin or viewer, and you decide who can approve and who can only watch.
  • Secrets never leave in a commitPasswords, keys and tokens are caught before they reach your repository, so your history stays clean and nothing needs rotating in a hurry.

Lift your eyes and let us carry the rest.

Talk to us and see what carrying your product forward looks like.

Book a conversation

Prefer to write directly? contact@zefana.com