|

Help Centre workspace

Administration

Configure the organisation, users, roles, security, module access, provider integrations, Policy and Document behaviour, scoring models, notifications and AI availability.

Start with the workflow

Configure before you scale

A controlled configuration gives operational teams consistent permissions, thresholds, workflow behaviour and ownership across PurpleWASP.

1
Organisation

Set organisation profile, security preferences and AI availability.

2
Access

Create roles, map permissions and assign users using least privilege.

3
Workflow

Configure governed document behaviour, quizzes, reminders and notifications.

4
Models

Review Asset CIA scales, Risk criteria and module-specific governance settings.

5
Integrations

Connect supported providers, test credentials and validate scheduled collection.

6
Validate

Test principal roles and end-to-end workflows before rollout.

Administrator guidance

Configure the platform

Establish the principal settings, access model and validation checks before operational rollout.

Configuration

Configure the PurpleWASP platform

Set organisation, users, roles, security, governed documents, Assets, Risk and cross-module access.

Read guide
Integration Management

Connect and operate supported providers

Configure GitHub, Google Workspace, Microsoft, AWS and Qualys through the shared Integration Management control plane, then monitor scheduled collection and downstream evidence.

Setup

Connect GitHub, Google Workspace and other integrations

Configure supported GitHub, Google Workspace, Microsoft, AWS and Qualys connections, review readiness, choose optional auto-refresh and validate evidence.

Read guide Operations

Operate and troubleshoot integrations

Monitor jobs, run history and collection readiness, and troubleshoot provider connections, OAuth and evidence limitations.

Read guide
First-time guidance

Integration setup handbook

Customer-facing setup steps for connecting supported providers and reviewing evidence.

Handbook

Integration Management First-Time Implementation Handbook

Step-by-step setup for Microsoft, AWS, Google Workspace, Qualys and GitHub, including optional GitHub Auto-Refresh.

Download
Important operating rules

Treat configuration as a governed change

Changes to access, matrices, thresholds, document behaviour or AI availability can affect users and existing records.

  • Test role changes with a non-administrator account.
  • Review affected Asset and Risk values after CIA/model changes.
  • Document appetite, tolerance and exception authority decisions.
  • Validate module access and cross-module hand-offs before broad rollout.
  • Treat provider credentials as secrets and verify worker/scheduler health before relying on automated evidence.