KeyTrail

KeyTrail is a web app (with lightweight Slack/Teams integration) that continuously maps who has access to what across your SaaS stack and flags risky identity drift. Instead of trying to replace your IdP, it sits alongside Okta/Azure AD and focuses on the messy reality: direct app invites, stale accounts, shared admin roles, and “temporary” permissions that never get removed. It pulls user/role data from common SaaS tools (Google Workspace, Microsoft 365, GitHub, AWS, Salesforce, Jira, etc.), builds a simple access graph, and highlights anomalies like orphaned accounts, privileged users without MFA, and ex-employees still active in non-SSO apps. The MVP ships with actionable playbooks: one-click ticket creation, owner assignment, and time-boxed access reviews. It’s a traditional app with AI-assisted insights (summaries and prioritization), not an autonomous security tool.