Governance capabilities
Findings
Review security and access concerns with evidence and remediation context
Shadow Apps
Review applications discovered outside expected access workflows
OAuth Grants
Review delegated third-party access and related risk context
Browser security
Review supported browser usage and security-signal categories
Playbooks
Follow approved multi-step operational workflows where enabled
Pulses
Verify application usage with employees through configured channels
Rules
Notify or route supported events according to workspace configuration
Access Requests
Review and record application access decisions
Identity and access context
Connected identity providers can add user, group, application, activity, and delegated-access context to governance review. The level of detail available depends on the provider connection and the user’s workspace permissions. Porcia uses this context to help teams answer questions such as:- Which applications are connected or assigned?
- Which tools appear to be actively used?
- Which delegated applications have access that needs review?
- Which applications were discovered outside expected workflows?
- Which findings or access requests need an authorized decision?
Governance boundaries
- A review or approval decision in Porcia does not automatically provision access in an external application.
- Provider connections and administrative actions have provider-specific permissions.
- Notifications and workflow delivery depend on workspace configuration.
- Security and compliance views provide the evidence and context available to Porcia; they do not replace a certification or legal assessment.
Next steps
Findings
Review security posture and access concerns
Shadow Apps
Review unexpected application discoveries
OAuth Grants
Review delegated access
Roles & permissions
Understand workspace access scope