For security and IAM leaders
Your Okta automation changes access. Know what it can change.
Okta Workflows grant and remove access, often with nobody watching. Assay writes down what every flow can do, limits what a run may change, and gives you evidence an auditor can check.
Four questions
The questions you get asked, answered from your own estate.
What can our automation change?
Every flow written down from its export: what starts it, which cards grant or remove access, which systems it calls, and what is left half-done when it fails part-way.
FLOW MAP · ARCHITECTURE
What stops a bad run?
Run limits cap how many users one run may act on. Changes are rehearsed in a dry run and reviewed; promotion to production needs an owner’s approval.
RUN LIMITS · DRY RUN · PROMOTE
Will we know when something stops?
Run alerts learns each flow’s rhythm and tells you about a missed run, a jump in failures or a rate limit. Every run is on record, card by card.
RUN ALERTS · RUNS
Can we prove it?
A signed A to E grade against 56 controls that anyone can verify offline, auditor links that expire, and what each flow looked like on any past date.
SIGNED REPORT · HISTORY
How it fits your controls
What your security review will ask, answered.
No Okta credentials
Assay reads exports and the events Okta streams to it. No password, token or admin role.
Your sign-in, your roles
Sign in with your own Okta. Viewers, developers, assessors and owners each do only what their role allows.
Signed, not asserted
Reports and alerts are signed with Ed25519. Change a finding and the signature fails.
Inside your network
Enterprise runs self-hosted, with your own retention and region. Staff enter only when an owner turns on support access.
How teams adopt it
Your engineers try it first. You decide when it becomes a control.
Step 1
A free grade
Export a folder and see the estate’s grade and its worst findings.
No cost
Step 2
An assessment
Every finding with its evidence, a prioritised fix plan and a signed report, in five working days.
from $3,500
Step 3
A workspace
Re-assessment as the estate changes, quarterly signed reports, run monitoring, change control and audit evidence.
from $18,000 a year
Step 4
Enterprise
Several Okta orgs, self-hosted, Lens installed by Chrome policy, your own retention.
Priced with you
Full plan details on the pricing page.
See your own estate through an auditor’s eyes.
A free grade in minutes, or a full signed assessment in five working days.