Everything here hangs off one thing: a person joining, and a person leaving. Start with the lifecycle — the rest is there when you need it.
Before they join
3 modules
The day they join
3 modules
While they’re here
8 modules
Also in the platform
4 modules
Sign-in & Access
Proving identity, and who can reach the instance
How people prove it’s them
Passkey
WebAuthn / device biometrics
Authenticator app
Time-based one-time codes
Recovery code
One-time backup codes
Email magic link
Passwordless sign-in link
Who can reach your instance
Enforcement Mode
Passkeys, step-up,
and a locked front door.
People sign in with a passkey, an authenticator app, a one-time recovery code, or a passwordless email link. A device you approve can skip the second factor for a while — and you can revoke any device, or every device at once, the moment something looks wrong. Sensitive actions ask them to re-authenticate first, repeated wrong passwords lock the account, and abusive traffic is rate-limited at the gateway. You can also fence the instance to specific IP ranges or countries — and try any rule in dry-run before you turn it on. Every sign-in and access decision is written to an append-only log. And the front door is yours: your logo, company name, and brand colour carry across the login screen and the whole console — set them on the in-app Branding page any time after sign-in, no redeploy.
- Sign-in
- Passkeys + MFA
- Sensitive ops
- Step-up re-auth
- Perimeter
- IP & geo rules
Four more things you do not pay extra for.
Disable them once
When your directory disables, suspends or deletes someone, Zonitix runs the full offboarding by itself: accounts removed, devices flagged for return, access stripped, and an audit record written.
Access reviews on a schedule
Set a review to launch itself on a cadence, so the quarterly certification an auditor asks for does not depend on someone remembering to start it.
Bring people in by CSV
Import your people from a spreadsheet, with a preview of every row before anything is created.
A home view per role
The home dashboard has four views — Security & Infrastructure, Finance & ROI, Operations and Workforce — and each person sees the ones their permissions allow.
Single sign-on, SCIM, SIEM log forwarding and API tokens are on every plan too — see Sign-in security & SSO.
Day-Zero Setup
First-run wizard — live in minutes
Admin Identity
Create the administrator
Review & Launch
One-shot initialization
Final Review
Secure defaults applied
MFA enforced · strong password policy · 8h sessions · standard roles
Default groups created
Everyone · IT · Finance · Human Resources · Manager · Engineering · Security & Compliance
Branding
Zonitix defaults — set your name, logo & colour under Administration → Branding
From zero to running
in one guided pass.
On first launch, a two-step wizard has you create the administrator account, review, and launch — then initializes the whole platform in one shot. Security policy, roles and branding ship with defaults you change after signing in, and the administrator enrols in multi-factor authentication at first sign-in. No runbook, no half-configured instance. Included with every plan.
- Guided
- 2 Steps
- Guardrails
- Secure Defaults
- Launch
- One-Shot Init
Everyone who has to approve this.
Buying this is never one person’s call. Here is what the same lifecycle looks like from each seat at the table — the job it does for the people who run it, and for the people who have to sign off on it.
IT Operations Lead
The scenario · Illustrative use caseA new engineer starts Monday. Instead of filing separate tickets for Slack, AWS, and GitHub, one lifecycle workflow provisions every account from the role definition, and records what it granted.
Onboarding workflow trigger
Illustrative role-based scenarios describing how each job function would use Zonitix. These are product capabilities, not customer testimonials, quotes, or results — no real people or organizations are depicted.
See them running, live.
A 30-minute walkthrough on a live Zonitix instance — no slides, no commitment.
In the walkthrough
Onboarding one person
Accounts and apps provisioned by role on day one.
Offboarding another
Access removed, and the laptop flagged for return.
The modules on this page
Pick the ones you want to look at.
Your questions
Thirty minutes on a live instance, with time to ask.