Included Capability

Security & Access

Authentication, user management, and layered permissions, included with every plan. Your identity provider decides who gets in; roles and inheritance decide what each person can reach.

Authentication that isn't an upsell

SSO is included on every plan — no security tax, no enterprise tier to unlock it. Bring your identity provider, skip the account setup, and give everyone a secure way to sign in, whether or not they sit in your directory.

Single sign-on through the identity provider you already run, with accounts created on first login
Passkeys, social login, and authenticator-app two-factor on every account

Identity providerSingle sign-on · okta.northwind.comCONNECTEDPROTOCOLSSOPLAN COSTNO UPCHARGEAUTO-CREATED · FIRST LOGINACCOUNTGROUPSROLEYour directory stays the source of truth

Everyone who needs an account gets one

Users are never a line item. Invite the whole security team, the engineers who own the evidence, and the executives who sign off — then organize them into groups that map to how your organization actually works.

Unlimited users on every plan, with no per-seat pricing
Groups for teams, functions, and audit scopes

USERS IN THIS ORGANIZATION184296137COST CHANGE$0.00Security team6Engineers who own the systems104Executives who sign off27No per-seat fees and no user count to negotiate

The right access without handing out admin

Give people exactly the access their work needs without making everyone an admin. Access layers across the organization, a group, a program, a functional role, or a single object; base roles handle the common cases and additional roles the exceptions, and inheritance carries a grant down from a group or parent object so you set it once instead of reassigning it by hand. API tokens carry the same scoping.

Base and additional roles, assignable to a person or a group
API tokens scoped by object and action, revocable on their own

ORGANIZATION ROLESSENSIBLE DEFAULTSOwnerFULLSuper adminADMINISTERAdminMANAGEMemberCONTRIBUTEAuditorEVIDENCELayer on roles for more access without full permissions

Authentication

Let your directory decide who gets in, and give everyone a secure way to sign in — included on every plan.

User management

The people who need access have it without a procurement conversation — unlimited users, organized into groups that match how you work.

Permissions

Access at the level of the work, from the whole organization down to a single object — without handing out admin.

Developer friendly

Push evidence from the pipelines you already run, against the same documented GraphQL API the console uses.

Included with Every Plan

No SSO tax, no seat math

Single sign-on, granular roles, and unlimited users ship on every Openlane plan — the same authentication, user management, and permission model for every customer, whatever they pay.

Security ships with every plan

SSO, 2FA, and audit trails are included with every plan, so the controls that keep an account safe are on from day one.

Seats shouldn't gate access

Compliance is a team sport. If adding the engineer who owns the evidence costs money, the evidence request goes to email instead.

Least privilege by default

Roles, groups, and inheritance make narrow access the easy path, so nobody grants admin to get someone unblocked.

Trusted By

Included with Every Plan

Security that ships with the product

Turn on SSO, invite your whole team, and scope access properly — without a pricing conversation.

Get Started Free See Pricing

No credit card. 30-day free trial.