Teams
A company account puts the whole team on one plan: invitations, roles, shared SSH vaults, and one per-seat invoice.
Setting up
Create a company account from the dashboard. You become the owner; invite members by email. Each member creates their own account and sets their own encryption passphrase, which never leaves their machine - there is no moment where anyone's secrets pass through yours.
Roles
| Role | Can |
|---|---|
owner | Billing, seats, and the organization itself. |
admin | Invite and remove members, manage team settings. |
member | Use the product with the team's plan. |
Shared SSH vaults
A vault shared with the team is wrapped to each member's own key: granting access creates one small wrapped blob, and no credential ever moves in plaintext. Members see the shared connections in their session picker, ready to open. Share with one teammate, a few, or the whole organization, per vault (the cryptography in detail).
Offboarding
Remove a member and their vault wraps are deleted: nothing synced afterwards can reach them, and their seat frees automatically. For anything they could have copied while they had access, rotate the underlying credential once, in the vault - the update reaches every remaining member.
Billing
Team plans are billed per seat on one consolidated invoice. Seats update automatically as you invite and remove members; only the owner manages billing. See pricing for the current numbers.
On the way
Single sign-on through SAML and OIDC, and a team audit trail surfaced in the dashboard. Want these for your team? Tell us what you need.