JITAccess

JITAccess is a web app (with optional Slack/Teams add-ons) that enforces time-bound, approval-based access to sensitive systems without requiring a full IAM rip-and-replace. It sits between your IdP (Okta/Azure AD) and key targets (AWS, GCP, GitHub, databases) to grant elevated roles only when requested, only for a defined window, and only with a clear audit trail. The product focuses on the messy reality: standing admin permissions, shared break-glass accounts, and “temporary” access that never gets removed. It provides a simple request workflow, policy templates (on-call, incident response, production deploy), and automatic revocation with verification. Reporting is built for auditors: who requested what, who approved, what was accessed, and whether access was removed on time. This is a combination traditional + AI app: AI helps detect risky access patterns and suggest tighter time windows, but core controls remain deterministic.