Enterprise

Capabilities aimed at teams who have to answer to someone else: a security reviewer, an auditor, a customer with a contract, or a board.

Only SAML single sign-on and SCIM provisioning require an Enterprise plan; the rest work on every plan. See plan limits.

M2M API clients OAuth2 client-credentials access with per-family scopes, one-time secrets, rotation and immediate revocation.

Customer audit log Every change made through the dashboard or API, with the actor, the request and the source IP.

CSV exports Raw check results and per-monitor uptime summaries as downloadable CSV.

SLA reports Monthly uptime attainment against a target, per monitor or across the account.

SAML single sign-on Send your team's sign-ins to your identity provider once you prove you own the email domain.

SCIM role mapping Exact role IDs for your identity provider. Unknown names become Member.

Which credential should automation use?

	API key	M2M client
Shape	Long-lived bearer token	Secret exchanged for short-lived tokens
Access	Everything, or only the scopes you grant	Only the scopes you grant
Revocation	Revoke the key, effective immediately	Revoke the client, effective immediately
Rotation	Built in, no overlap window	Built in, no overlap window
Audit trail	Recorded as api_key	Recorded as m2m with the client ID

Use an API key for a quick script or a one-off. Use an M2M client for anything long-lived, anything a third party operates, and anything where a leaked credential should be able to do as little as possible.

Answering the common questions

Question	Where to look
”Who deleted that monitor?”	Audit log, filtered by action and http_method.
”Did we meet 99.9% last quarter?”	SLA reports with months=3.
”Can you send us the raw check data?”	CSV exports.
”What can this integration actually touch?”	The client’s scopes.

See also

Account and team setup Roles, API keys, and billing.

API Reference Wire-level request and response shapes.