Security
MFA, sessions & keys · 10 of 12 users enrolled · 3 active sessions · 0 break-glass requests
Session & MFA policy
Require MFA for all usersAuthenticator app or security key · 2 users still not enrolled
Require security keys for Owner/AdminFIDO2/passkeys for the two highest roles
Console idle timeout15 minutes · re-authenticate with MFA
Dual approval for content access and hold releaseSecond Compliance or Owner approval before archived content is opened
Trusted devices for 30 daysSkip MFA on devices that passed a full check
SSO Hosted Pro
SAML 2.0 / OIDCOkta, Microsoft Entra, Google · keep one break-glass owner with a security key
Not configuredGuide →
Sessions & break-glass
Active sessions3 · Maria: iPhone, MacBook · Jordan: MacBook
Break-glass requests0 open · emergency access is time-boxed and logged
None openSecurity contact[email protected] · receives incident and vulnerability notices
API keys Hosted Pro
| Name | Scopes | Last used | Status |
|---|---|---|---|
| Vanta evidence | read:audit, read:reports | 2 h ago | Active |
Keys are shown once · rotate every 90 days
Webhooks
| Endpoint | Events | Status |
|---|---|---|
https://psa.coastal-it.com/hooks/pxc | message.held, dns.changed, reputation.* | Healthy |
Signed with HMAC-SHA256 · retried for 24 h