Emergency access
Break-glass monitoring
Know when break-glass accounts sign in and when enforced policies are missing the exclusion group - before an audit or incident review.
Create your account, set up a workspace, and get 14 days of Pro - connect tenants, detect drift, and run impact analysis. No credit card required.
What Policytab watches
The Policytab baseline defines a break-glass group by default. Map your tenant emergency access group per connected tenant, then Policytab scans sign-ins and validates that enforced blocking policies exclude that group.
Sign-in checks run on a five-minute schedule. A daily validator flags policies missing break-glass exclusions and raises critical alerts.
- Per-tenant break-glass page with member roster and detector status
- Watermark-based scans - will not re-process the same window
- Critical alerts for break-glass sign-ins and membership changes
- Exclusion gap detection tied to your latest policy snapshot
Operational, not a bypass
Break-glass monitoring is read-only posture reporting plus alerts. Fixing missing exclusions still goes through governed change requests when you choose to remediate.