Platform Settings

Configure global platform settings

General Settings

Signup Auto-Approval

Auto-Approval

Auto-approve low-risk signups (default off)

Shadow Mode

Score and alert only, never act (dry run)

Review Threshold (1-100) Signups scoring at or above this are held for manual review and an alert is emailed. Below it, clean signups auto-approve.

Suspicious-Signup Alert Group Superadmin group that receives an email when a signup is held for review. One address per line or comma-separated. Leave blank to fall back to the Support Email.

Security Settings

Session Timeout (minutes)

Max Login Attempts

Account Lockout Duration (minutes)

Password Minimum Length

Password Requirements

Require uppercase letters Require lowercase letters Require numbers Require special characters

Multi-Factor Authentication

Enforce MFA for all users

Allowed IP Ranges (one per line)

Pricing Plans

Edit the prices and asset allowances displayed on the marketing site and in tenant billing pages. Changes propagate within ~5 minutes (server-side cache TTL).

Loading plans…

Plan Features

Feature bullets rendered on the marketing site and tenant billing pages. One bullet per line. Included features show as ticks; disabled features are the crossed-out rows on the comparison table. Changes propagate within ~5 minutes.

Loading plans…

Settings Auto-Sync Changes saved here automatically propagate to all tenants.

Storage

Archive & object storage

Not Configured

Payment

Stripe billing & subscriptions

Not Configured

Stripe - MSP Plans

Bill MSPs from a separate Stripe account

Not Configured

Notifications

Email SMTP & Slack alerts

Not Configured

AI / LLM

PentestOps AI analysis engine

Not Configured

Identity & SSO

Okta single sign-on

Not Configured

Cloud Services

AWS S3, regions & access

Not Configured

Storage Integration

Archive Storage

Not Configured

Configure object storage for tenant data archival. MinIO is pre-configured and runs in the same K8s cluster.

Enable Archive Storage

Archive tenant data on permanent delete

Storage Provider

MinIO Endpoint

Access Key

Secret Key

Archive Bucket

Legal Agreements Bucket

Use SSL

Connect using HTTPS

S3 Bucket Name Uses AWS credentials from Cloud Services integration

GCS Bucket Name

Service Account JSON

Connection String

Container Name

Payment Integration

Stripe

Not Configured

Configure Stripe for tenant billing, subscriptions, and payment processing. All tenants will use this Stripe account.

Public Key

Secret Key

Webhook Secret Get this from Stripe Dashboard → Developers → Webhooks → Add endpoint at https://api-v2.<your-domain>/api/v1/stripe-webhook with events: checkout.session.completed, customer.subscription.*, invoice.paid, invoice.payment_failed

Subscription Price IDs

After creating Products + Prices in your Stripe Dashboard, paste the resulting price_xxx IDs here. These drive the recurring subscription charges. Free tier needs no price.

Starter - Monthly

Starter - Annual

Professional - Monthly

Professional - Annual

Enterprise - Monthly

Enterprise - Annual

Notification Integration

Email / SMTP

Not Configured

SMTP configuration for system emails, notifications, and alerts across all tenants.

SMTP Host

SMTP Port

SMTP Username

SMTP Password

From Address

From Name

Security

Slack Notifications

Not Configured

AI / LLM Integration

PentestOps AI Engine

Not Configured

Configure the AI/LLM provider for vulnerability analysis, remediation suggestions, and AI-powered features across all tenants. Changes apply to all existing and new tenants.

Enable AI Analysis

Enable AI-powered analysis for all tenants

AI Provider All AI features are branded as "PentestOps AI" regardless of backend provider

Ollama Service URL URL to the Ollama API service (in-cluster or external)

Model Select a model from your Ollama instance

OpenAI API Key Your OpenAI API key. Stored encrypted.

Model

Anthropic API Key Your Anthropic API key. Stored encrypted.

Model

Server URL URL to any OpenAI-compatible server. Include /v1 if needed (e.g. http://host:port/v1)

Model Select a model or type a custom name

API Key (optional) Some servers require an API key. Stored encrypted.

Pentest Agent self-update channel

Bump the version here once and it propagates to every tenant's Vault path within seconds. Each connected agent learns on its next 6h /comm/check-update poll, then auto-upgrades using its native install method (docker compose / dnf / apt). New tenants downloading the agent from now on get this version directly.

Latest Release

Latest Version Semver e.g. 3.0.1. Leave blank to auto-detect from the agent registry, the highest semver tag in pentest-agent is broadcast to every tenant. Pin a specific version only for staged rollouts or change-window control.

Docker Image Tag Defaults to the version above if blank. Override only when the Zot tag differs (e.g. 3.0.1-hotfix).

Release Notes URL (optional)

Force update (override AGENT_AUTO_UPDATE=false on agents) Reserve for security-critical releases. Any agent that opted out of auto-update with AGENT_AUTO_UPDATE=false in their config.env will still upgrade on their next poll. Tenant change-window control is bypassed for this release.

Platform Settings

General Settings

Signup Auto-Approval

Security Settings

Pricing Plans

Plan Features

Storage

Payment

Stripe - MSP Plans

Notifications

AI / LLM

Identity & SSO

Cloud Services

Storage Integration

Archive Storage

Payment Integration

Stripe

Subscription Price IDs

Stripe - MSP Plans

Stripe for MSP billing

Notification Integration

Email / SMTP

Slack Notifications

AI / LLM Integration

PentestOps AI Engine

Identity & SSO

Okta SSO

Cloud Services

AWS Configuration

Latest Release