Access governance for infrastructure

Eliminate security and compliance gaps in access control

Principal syncs your teams from GitLab, GitHub, and Google Workspace, manages their access to Kubernetes and databases, and fixes drift automatically.

See how it works
Dashboard with items that need review, access totals, and the action queue

Connects to the tools you already use

GitLab GitHub Google Workspace Kubernetes PostgreSQL MySQL

Granting access
is only the beginning.

People move teams. Permissions change. Old access stays behind.
Who still needs it—and who’s keeping track?

  • 01

    ClickOps

    Engineers become access gatekeepers.

  • 02

    Infrastructure as code

    Access workflows become another project.

  • 03

    Unguarded AI agents

    Faster changes. The same control gap.

Different Approaches.
Same Problems.

ClickOps, Classic IaC, and AI Agents all leave
critical gaps in access management.

Access Management Is Hard.
Principal Makes It Simple.

Principal brings identities, policies, and permissions from across your infrastructure into one unified access model.

Identity sources Target systems Discovers & normalizes Builds a single access model Unified access model Identities & Groups Roles & Permissions Resources & Targets Identity sources Target systems Discovers & normalizes Builds a single access model Unified access model Identities & Groups Roles & Permissions Resources & Targets
  1. 01

    Connect

    Connect the directories your team uses and the infrastructure they need to access.

  2. 02

    Discover

    Principal discovers users, groups, and permissions, bringing existing access into one shared model.

  3. 03

    Manage

    Define the access you want, compare it with what exists, and preview changes before applying them.

Bring access under control

Know who has access.
And why.

Connect users, groups, and policies to the permissions actually granted across your infrastructure.

  • See desired and actual access in one model
  • Preview what will change before applying it
  • Trace access through its full history
Desired state User / Group Access Policy Target History Version #1 Version #2 Version #3 Actual state User / Group Granted Permissions System

Evidence ready.
Before the audit starts.

Bring your access inventory and change history together, with reports ready when you need them.

  • See managed and unmanaged access coverage
  • Keep user actions, system changes, and drift in history
  • Generate access reports on demand
Inventory Targets, groups, permissions Coverage Managed vs. unmanaged History Actions, changes, drift Reports Generated on demand

Start with what exists.
Adopt at your pace.

Bring existing infrastructure under control, one scope at a time, without a big-bang migration.

  • Discover existing users, groups, and permissions
  • Separate managed access from external permissions
  • Choose your scope, then standardize with policies
Before Discovery & Adoption After Users Groups Permissions Users Groups Permissions Users Groups Permissions Users Groups Permissions Users Groups Permissions

Keep access aligned.
As things change.

Keep identities in sync and compare policies with real permissions to stay in control after access is granted.

  • Sync users, groups, and memberships
  • Detect missing, extra, or changed permissions
  • Review differences, remediate, and revoke access
Users, groups & memberships Define Preview Apply Observe Detect drift Remediate / revoke Reviews & takes action Automates & controls access state

Ready to bring access
under control?

Tell us about your infrastructure.
Let’s discuss how Principal fits your team.

Let’s talk.

Tell us about your infrastructure and how we can help.

* Required fields