Bring your team and your clients in
Pro includes 5 people and Agency 25, counting you. Each person is a Viewer, Member or Admin, and an activity log keeps 365 days of who did what.
Who can do what
The account that pays is the Owner. Everyone else gets one of three roles.
| Role | What they can do |
|---|---|
| Viewer | Can look at sites, reports, the review queue and evidence. |
| Member | Can also run scans and re-tests and update findings. |
| Admin | Can also add and remove sites, alerts, brand, API tokens and people. |
| Owner | Everything, including the plan, billing and deleting the workspace. |
Only the Owner can make someone an Admin. Admins can manage Viewers and Members.
How inviting works
Enter an email address and pick a role. We send an invitation.
The link works for 7 days. You can resend or cancel it from the list.
They create an account or sign in, accept, and see your sites. An open invitation uses a seat until it is accepted, cancelled or expired.
Seats by plan
| Plan | People |
|---|---|
| Free | Just you |
| Starter | Just you |
| Pro | Up to 5, counting you |
| Agency | Up to 25, counting you |
If you move to a plan with fewer seats, people over the limit can still look around but can no longer change anything until there is room again.
The activity log
Every change is written down with the person, the time and what it was about. Entries are kept for 365 days, and you can filter by person.
- Sites added or removed, scans started, findings updated.
- Alert channels added or removed, report branding changed, API tokens created or revoked.
- People invited, joined, removed or given a new role, and plan changes.
- Prospects added and pitch reports shared, evidence records downloaded, finding rules changed and fix kits downloaded.
Handing out the work
On Pro and Agency, finding rules can assign a new problem to a person, set a due date, or accept a risk for you. Alert emails carry a re-scan button, and Mark as fixed and Snooze buttons.
Related
Common questions
Does an invited person need to pay?
No. They use a seat in your plan. Only the account owner pays.
Can a client see their site without seeing my other clients?
No. A person invited to a workspace sees every site in it. For one client, send them a shared report link instead, or use the white-label client report.
Do API tokens count as people?
No. Tokens are separate from seats and can only add sites, start scans and read results.
Who can see the activity log?
Everyone in the workspace can open it, on Pro and Agency. It shows the person, the time and what it was about.
See what your own website does.
Free, no signup, about a minute for your homepage.