Emergency access
Break-glass monitoring
Know when break-glass accounts sign in and when enforced policies are missing the exclusion group - before an audit or incident review.
Create your account, set up a workspace, and get 14 days of Pro - connect tenants, detect drift, and run impact analysis. No credit card required.
What Policytab watches
Community baselines often define a break-glass group. Map your tenant emergency access group per connected tenant, then Policytab scans sign-ins and validates that enforced blocking policies exclude that group.
Sign-in checks run on a five-minute schedule. A daily validator flags policies missing break-glass exclusions and raises critical alerts.
- Per-tenant break-glass page with member roster and detector status
- Scheduled scans avoid reprocessing the same window
- Critical alerts for break-glass sign-ins and membership changes
- Exclusion gap detection tied to your latest policy snapshot
Operational, not a bypass
Break-glass monitoring is read-only posture reporting plus alerts. Fixing missing exclusions still goes through governed change requests when you choose to remediate.
Break-glass monitoring
Monitor emergency access sign-ins and missing break-glass exclusions. Scheduled validator and five-minute sign-in checks with critical alerts.