Evidence collected from the systems you already run.

A read-only IAM role you install from a CloudFormation template. Pulls evidence covering identity, logging and encryption.

A GitHub App with read-only org and repo scopes. Pulls evidence covering org members, two-factor enforcement, branch protection, CODEOWNERS and the audit log.

Sign in with Google and grant read-only access. Pulls identity, access, logging and storage encryption evidence from the projects that account can see, up to 100.

Read-only admin scopes covering user accounts, 2-Step Verification enrollment, group membership, and the login and admin audit logs.

A read-only admin API token. Pulls users with last sign-in, multi-factor authentication (MFA) enrollment, sign-on policies, admin roles and deprovisioned users.

An app registration in your own tenant with read-only Microsoft Graph permissions. Pulls users, multi-factor authentication (MFA) registration, conditional access, privileged roles and Intune device encryption.

A personal API key. Pulls completed issues and workspace members as change management evidence.

An API token for an account you choose. Pulls resolved issues, projects and site users as change management evidence.

A bot token from an app you create from Polara's manifest, read scopes only. Pulls workspace members, admins, guests and deactivated accounts.