|

Home
Platform
Seamless Integration with Cloud Platforms

PurpleWASP integrates with OneDrive, SharePoint, Google Drive, and Dropbox to manage policies where they already exist.

Solutions
Seamless Integration with Cloud Platforms

PurpleWASP centralizes policy workflows across your cloud drives.

Pricing
Partners
Maximize Your Potential with PurpleWASP

Whether you’re a technology partner or a reseller, we provide the tools, support, and resources for success.

PurpleWASP Risk Management guide
Featured guide
Create and assess a risk

Learn how to complete CIA and FAIR assessments, add controls, assign treatment actions and manage risk exceptions.

Read the guide
Help Centre workspace

Administration

Configure the organisation, users, roles, security, module access, provider integrations, Policy and Document behaviour, scoring models, notifications and AI availability.

Start with the workflow

Configure before you scale

A controlled configuration gives operational teams consistent permissions, thresholds, workflow behaviour and ownership across PurpleWASP.

1
Organisation

Set organisation profile, security preferences and AI availability.

2
Access

Create roles, map permissions and assign users using least privilege.

3
Workflow

Configure governed document behaviour, quizzes, reminders and notifications.

4
Models

Review Asset CIA scales, Risk criteria and module-specific governance settings.

5
Integrations

Connect supported providers, test credentials and validate scheduled collection.

6
Validate

Test principal roles and end-to-end workflows before rollout.

Administrator guidance

Configure the platform

Establish the principal settings, access model and validation checks before operational rollout.

Configuration

Configure the PurpleWASP platform

Set organisation, users, roles, security, governed documents, Assets, Risk and cross-module access.

Read guide
Integration Management

Connect and operate supported providers

Configure Microsoft Entra ID and Qualys through the shared Integration Management control plane, then monitor scheduled collection and downstream evidence.

Setup

Connect Microsoft and Qualys

Configure the shared Microsoft tenant connection, enable only the required capabilities, test capability readiness and validate the first collection cycle alongside Qualys.

Read guide Operations

Operate and troubleshoot integrations

Monitor jobs, runs, worker/scheduler health, rotate credentials and diagnose provider or evidence failures.

Read guide
Implementation documentation

Integration implementation and engineering references

Download the rollout, technical, operational and provider-development documentation for the shared integration architecture.

Handbook

Integration Management First-Time Implementation Handbook

Practical first rollout for the Microsoft multi-capability integration, Qualys, background services and evidence validation.

Download Technical reference

Integration Management Technical Implementation Guide

Architecture, database model, runtime, observations, evidence automation, UTC and deployment baseline.

Download Runbook

Integration Operations & Troubleshooting Runbook

Operational checks, diagnostics, recovery, credential rotation and escalation guidance.

Download Developer guide

Integration Provider Development Guide

Engineering conventions for extending capabilities and adding new providers, with AWS as the next provider design baseline.

Download
Important operating rules

Treat configuration as a governed change

Changes to access, matrices, thresholds, document behaviour or AI availability can affect users and existing records.

  • Test role changes with a non-administrator account.
  • Review affected Asset and Risk values after CIA/model changes.
  • Document appetite, tolerance and exception authority decisions.
  • Validate module access and cross-module hand-offs before broad rollout.
  • Treat provider credentials as secrets and verify worker/scheduler health before relying on automated evidence.