Organizations and members
Switching and ownership
Choose an organization from the header menu and check its name before performing an operation. An account can own at most 3 organizations. This applies to creation, accepting OWNER invitations and promotion to OWNER. The last OWNER cannot leave, be removed or be demoted.
Role permissions
| Operation | OWNER | ADMIN | MEMBER | VIEWER |
|---|---|---|---|---|
| Read results and organization data | Yes | Yes | Yes | Yes |
| Run evaluations | Yes | Yes | Yes | No |
| Add, configure and delete domains | Yes | Yes | No | No |
| Invite, change roles and remove members | Yes | Except OWNER | No | No |
| Manage API tokens | Yes | Yes | No | No |
| Require organization MFA; configure SSO / IP restrictions | Yes | No | No | No |
Invitations and member limits
An OWNER or ADMIN invites an email address with a role from Settings → Members. Invitations expire after 7 days. Resending replaces the previous invitation. ADMIN cannot invite, modify or remove an OWNER.
Limits include you and valid pending invitations and are checked both when sending and accepting. Cancel unneeded invitations to free capacity. A lower plan does not remove existing members, but invitations and joins cannot exceed its limit.
| Plan | Domains | Members | Maximum automatic scan frequency |
|---|---|---|---|
| Free | 1 | 1 | Weekly |
| Starter | 1 | 3 | Daily |
| Pro | 5 | 20 | Daily |
| Business | 20 | 50 | Daily |
| MSP | 50 | Unlimited | Daily |
If mail is missing, check spam and the destination address and ask the inviter to resend. The invitation address must match your verified primary or additional address. If signed in to another account, sign out and use the intended address, or add and verify that address on your original account.
Multiple addresses and the primary address
Add an address in Settings and open its verification link within 24 hours. Verified additional addresses sign in to the same account and can accept invitations addressed to them.
“In use” means the address belongs to another account. Accounts are not automatically merged. You can swap the primary address with a verified additional address; the previous primary remains as an additional address. The primary address cannot be deleted directly.
Removing an additional address also invalidates unused sign-in links and verification requests for it, and ends sessions other than the current one.