Features — Security Exception Manager

Zero-Trust Governance

Enforced Segregation of Duties (SoD)

Ensure that engineers requesting an exception cannot approve their own deviations. Dual-custody ensures peer and security team review for every risk accepted.

✓ Multi-tier approval thresholds by severity (Critical / High / Medium / Low)
✓ Automated rejection with required justification audit records
✓ Role-based access control (RBAC) with granular tenant scopes

[SOD_VALIDATION_ENGINE]

POST /api/v1/exceptions/EXC-2026-0001/transition
Actor: engineer@acme.com (REQUESTER)
Target Transition: APPROVED
[BLOCKED] 403 Forbidden: Requester cannot approve their own exception.

Dual custody enforced. Awaiting Security Approver review.

[EVIDENCE_VAULT_INTEGRITY]

Artifact: waf_firewall_bypass_rule.pcap
SHA-256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Storage: Tenant-Isolated S3 Bucket (AES-256 KMS)
Status: Verified & Audited

Evidence deletion emits immutable EVIDENCE_DELETED audit event.

Audit & Artifact Vault

Compensating Controls & Evidence Repository

Require proof of compensating controls before an exception can transition to active status.

✓ SHA-256 fingerprinting on all uploaded artifacts
✓ Multi-format support: PDF, PNG, JPG, PCAP, JSON, CSV
✓ Enforced tenant-isolated storage buckets with plan quota checks

Real-Time Search & Facets

Global Fast Search & Risk Faceting

Filter hundreds of active exceptions across cloud environments, services, owners, and expiration horizons in milliseconds.

✓ Search by CVE, host, cloud provider (AWS/GCP/Azure), or repo
✓ Dynamic risk scoring and liability posture breakdowns
✓ Export filtered lists directly to CSV or auditor-ready PDF dossiers

[DYNAMIC_FACET_QUERY]

GET /api/v1/exceptions?severity=CRITICAL&expiry_within_days=30&source=AWS
Response: 200 OK (14 records found in 8ms)
Aggregations: High Liability = $1.4M estimated exposure

3 exceptions require immediate renewal action.

Every Feature Needed for Total Security Governance

Enforced Segregation of Duties (SoD)

Compensating Controls & Evidence Repository

Global Fast Search & Risk Faceting

Ready to secure your exception governance?