Quickstart Guide for Continuous Web Security Testing with VAddy
Team Features (Standard / Professional)
Team member permissions
VAddy provides the following three levels of access permissions corresponding to each team member’s role.
- A domain’s owner (administrator) can add and remove servers; add and remove team members; register and view crawl data; run scans; and view scan results.
- A user with write access can register and view crawl data, run scans, and view scan results.
- A user with read access can view crawl data and scan results.
To give an example of how these access permissions could be used, we would expect internal developers and continuous integration (CI) operations teams to be given write access to crawl and scan a server while managers and external developers would be given read access to help them plan releases and revise code.
Relationships between domains and team members
Teams are built around servers (identified by FQDNs).
In this example, Alice registers www.example.com with her VAddy account and is thus automatically given owner permissions for the domain. Alice then invites Bob and Carol to her team, giving write permissions to Bob and read permissions to Carol (as shown on the left in the figure above). If Alice registers multiple domains, she can invite different team members for each one (as shown on the right in the figure above).
Features available to team members
Each domain’s team members can use the same features offered by its owner’s plan.
On the left, Alice is the owner of www.example.com and is signed up for the Professional plan. As a result, her team members (Bob and Carol) have access to all the features on the Professional plan for www.example.com, regardless of what their own plans are.
On the right, Bob is the owner of www.example2.com and is signed up for the Standard plan. As a result, his team members (Alice and Carol) have access to all the features on the Standard plan for www.example2.com, regardless of what their own plans are.
In other words, each user’s permissions are determined by his or her relationship with a domain, and the features available to users for a given domain are determined by its owner’s plan.
From the admin dashboard or the Select Server menu, choose the server (FQDN) to which you would like to add a team member and then enter a user’s email address. If you’ve entered the email address correctly, the name of the corresponding user account should appear (as shown in the figure above).
Choose the team member’s access permissions, then click Add.
All team members must have a VAddy account.
You can invite up to 5 team members per server on the Standard plan or up to 50 team members per server on the Professional plan.
Please contact email@example.com to report any problems with the site.
We also welcome your opinions and feature requests,
which will be used to guide future development.