Monstral / Enterprise Tier
Enterprise Tier
Multi-tenant isolation and access control built to survive an audit, not just a demo.
corporate_fare
Org, project, and role — properly modeled
Users belong to organizations through roles; every project is scoped to one org, so a viewer never sees a write button that isn't theirs to press.
history_edu
An audit log with no delete button
Every privileged action is recorded, permanently. A log you can edit after the fact isn't an audit trail.
vpn_key
Keys scoped to a single project
Machine access uses per-project service keys, not org-wide credentials, so a leaked crawler key can't expose accounts it was never meant to touch.
groups
Multi-tenant isolation, proven not assumed
Our own tenant-isolation checks log in as a lower role and confirm write actions vanish, then confirm a foreign project 404s instead of leaking that it exists.
audit_log
2026-03-11T09:14:02Z org_482 user_119 role=admin
action=project.key.rotate project=checkout-flow
result=success