Security policy
Organization guardrails
Require two-factor authAll members must enable 2FA before accessing the dashboard.
Allow personal access tokensWhen disabled, only organization-scoped service tokens are permitted.
Session timeoutMembers re-authenticate after inactivity.
IP allowlist
Restrict dashboard and API access to trusted CIDR ranges. Empty means no restriction.
103.23.20.0/24203.0.113.14/32