# Tierity Docs

- [Introduction](https://docs.tierity.com/index.md): Tierity is the security workbench for engineering teams. It connects the security tools you already run and turns what they find into one queue, with deadlines, tickets and an AI assistant.
- [Quickstart](https://docs.tierity.com/quickstart.md): Sign in, connect your first tool and work through your first findings.
- [Signing in](https://docs.tierity.com/sign-in.md): One flow for signing in and signing up: enter your email, then a code, a password or your company's SSO.
- [Self-hosting](https://docs.tierity.com/self-hosting.md): Run Tierity on your own infrastructure with Docker Compose. Your scanner credentials and findings never leave your network.
- [Local Development](https://docs.tierity.com/local-development.md): Run Tierity from source for development and testing. For people with access to the Tierity source repository.
- [Organizations](https://docs.tierity.com/concepts/organizations.md): An organization is your team's workspace in Tierity: the container for members, integrations, findings and settings.
- [Roles and permissions](https://docs.tierity.com/concepts/roles-permissions.md): Each member has a role in each organization. Roles decide who can view, act, configure and manage people.
- [Security Workbench](https://docs.tierity.com/features/workbench.md): The page your team starts the day on: cards from every connected tool, all open findings, and the tickets they've become.
- [Findings and deadlines](https://docs.tierity.com/features/findings.md): Every tool's findings on one severity scale, each with a deadline from its severity, and one click to a Linear or Jira ticket.
- [Pull requests waiting on you](https://docs.tierity.com/features/pull-requests.md): A personal queue of the pull requests that need you: review requests, changes requested, failing checks, conflicts and PRs ready to merge.
- [AI assistant](https://docs.tierity.com/features/ai-chat.md): Ask about your findings, what's overdue and what to fix first, or get help reviewing code and remediating an issue. Bring your own key, or use a model you run yourself.
- [Secret references](https://docs.tierity.com/features/secret-references.md): Point settings at a secret in 1Password, Bitwarden or AWS Secrets Manager instead of pasting it in. Tierity fetches it at the moment it's used.
- [Workflows](https://docs.tierity.com/features/workflows.md): Automate the security review your team does manually today — match a PR's CODEOWNERS to an AI skill and/or a custom scan before it can merge.
- [Integrations Overview](https://docs.tierity.com/integrations/overview.md): Tierity connects with the security and development tools your team already uses. Enable integrations through the marketplace to pull findings, automate notifications, and view external data without leaving the platform.
- [GitHub](https://docs.tierity.com/integrations/github.md): Connect Tierity to GitHub to review pull requests, view commits and file diffs, read and post comments, and approve PRs — all without leaving the platform.
- [GitLab](https://docs.tierity.com/integrations/gitlab.md): Review GitLab merge requests directly within Tierity.
- [Semgrep](https://docs.tierity.com/integrations/semgrep.md): Pull SAST findings, secrets detection results, and supply chain issues from Semgrep into Tierity.
- [Checkmarx One](https://docs.tierity.com/integrations/checkmarx.md): Import SAST findings from Checkmarx One into Tierity to triage, annotate, and track remediation alongside your security work.
- [Snyk](https://docs.tierity.com/integrations/snyk.md): Pull Snyk vulnerability findings for open source dependencies, container images, and code into Tierity for unified security tracking.
- [Aikido Security](https://docs.tierity.com/integrations/aikido.md): Import vulnerability findings from Aikido Security's continuous scanning into Tierity, including code vulnerabilities, exposed secrets, and dependency issues.
- [Arnica](https://docs.tierity.com/integrations/arnica.md): Connect Arnica to import code security posture and supply chain findings into Tierity, including hardcoded secrets, risky code changes, and developer risk signals.
- [Corgea](https://docs.tierity.com/integrations/corgea.md): Pull AI-assisted SAST findings from Corgea into Tierity.
- [Endor Labs](https://docs.tierity.com/integrations/endorlabs.md): Import dependency findings and reachability analysis from Endor Labs to track supply chain risk in Tierity.
- [GitGuardian](https://docs.tierity.com/integrations/gitguardian.md): Import secrets incidents from GitGuardian: hardcoded credentials found in your code, git history and CI.
- [DryRun Security](https://docs.tierity.com/integrations/dryrunsecurity.md): Import DryRun Security's contextual findings on your pull requests.
- [OX Security](https://docs.tierity.com/integrations/oxsecurity.md): Import application security issues and posture from OX Security's ASPM.
- [Escape](https://docs.tierity.com/integrations/escape.md): Import API security scan results from Escape to track vulnerabilities in your API attack surface.
- [OpenAPI viewer](https://docs.tierity.com/integrations/openapi.md): Browse OpenAPI and Swagger specs inside Tierity, from a URL, a file or a GitHub repository.
- [AWS](https://docs.tierity.com/integrations/aws.md): Connect Tierity to AWS to discover cloud resources and identify security misconfigurations.
- [Google Cloud](https://docs.tierity.com/integrations/gcp.md): Discover Google Cloud resources with Cloud Asset Inventory and import Security Command Center findings.
- [Azure](https://docs.tierity.com/integrations/azure.md): Discover Azure resources with Resource Graph and import Microsoft Defender for Cloud findings.
- [Wiz](https://docs.tierity.com/integrations/wiz.md): Pull cloud security posture and vulnerability findings from Wiz into Tierity.
- [CrowdStrike Falcon](https://docs.tierity.com/integrations/crowdstrike.md): View endpoint detections, incidents, and agent health from CrowdStrike Falcon in Tierity.
- [SentinelOne](https://docs.tierity.com/integrations/sentinelone.md): View SentinelOne threat detections, agent health, and STAR alerts in Tierity.
- [Identity providers](https://docs.tierity.com/integrations/identity.md): Connect Okta, Microsoft Entra ID or authentik to find admins without MFA, leavers who still have access, dormant accounts and risky users.
- [Okta](https://docs.tierity.com/integrations/okta.md): Sync users, MFA, admins, devices and sign-in events from Okta to find identity risks.
- [Microsoft Entra ID](https://docs.tierity.com/integrations/entra.md): Sync users, MFA methods, directory roles, devices and risky users from Microsoft Entra ID through Microsoft Graph.
- [authentik](https://docs.tierity.com/integrations/authentik.md): Sync users, authenticators, applications and failed logins from authentik, including self-hosted instances.
- [HackerOne](https://docs.tierity.com/integrations/hackerone.md): Manage vulnerability reports from your HackerOne program in Tierity.
- [Jira](https://docs.tierity.com/integrations/jira.md): Push findings, tasks, and risks to Jira issues and link security work to your existing engineering backlog.
- [Linear](https://docs.tierity.com/integrations/linear.md): Create Linear issues from Tierity findings and view your team's issue backlog.
- [Notion](https://docs.tierity.com/integrations/notion.md): Connect a Notion workspace as a knowledge base source for Workflows — browse pages and tag the ones AI skills should pull as context.
- [Confluence](https://docs.tierity.com/integrations/confluence.md): Connect a Confluence space as a knowledge base source for Workflows — browse pages and tag the ones AI skills should pull as context.
- [Coda](https://docs.tierity.com/integrations/coda.md): Connect a Coda workspace as a knowledge base source for Workflows — browse pages and tag the ones AI skills should pull as context.
- [incident.io](https://docs.tierity.com/integrations/incidentio.md): Track active incidents, view severity breakdowns, and link security findings to incident response from Tierity.
- [PagerDuty](https://docs.tierity.com/integrations/pagerduty.md): View active incidents, on-call schedules, and service health from PagerDuty in Tierity's Security Workbench.
- [dmarcian](https://docs.tierity.com/integrations/dmarcian.md): View DMARC report data and email authentication coverage from dmarcian in Tierity.
- [KnowBe4](https://docs.tierity.com/integrations/knowbe4.md): View phishing simulation results and security awareness training completion rates from KnowBe4 in Tierity.
- [Fastly](https://docs.tierity.com/integrations/fastly.md): View WAF rule violations and traffic security data from Fastly in Tierity's Security Workbench.
- [Socket.dev](https://docs.tierity.com/integrations/socket.md): Monitor supply chain security alerts from Socket.dev in Tierity.
- [Vanta](https://docs.tierity.com/integrations/vanta.md): Pull compliance controls, security tests, evidence requests, and vendor management data from Vanta into Tierity.
- [Drata](https://docs.tierity.com/integrations/drata.md): Bring Drata's framework readiness, failing tests, personnel and device compliance, policies and vendor reviews into Tierity.
- [Monad](https://docs.tierity.com/integrations/monad.md): Monitor security data pipeline health from Monad in Tierity's Security Workbench.
- [1Password](https://docs.tierity.com/integrations/1password.md): Reference secrets stored in 1Password when configuring integrations in Tierity.
- [Bitwarden Secrets Manager](https://docs.tierity.com/integrations/bitwarden.md): Store your integration credentials in Bitwarden Secrets Manager and reference them in Tierity using {{bw.secret_name}} — without ever exposing raw secrets inside Tierity.
- [Slack](https://docs.tierity.com/integrations/slack.md): Send deadline alerts to a Slack channel when findings pass their SLA.
- [Personal Connections](https://docs.tierity.com/profile/connections.md): Configure personal API tokens so Tierity can take actions in external tools under your identity.
- [Security](https://docs.tierity.com/profile/security.md): Set up two-factor authentication, review recent sign-ins, and manage your account's security settings.
- [Administration Overview](https://docs.tierity.com/admin/overview.md): The Tierity server admin panel provides centralized control over users, organizations, AI providers, and billing. Only server admins can access this panel.
- [User Management](https://docs.tierity.com/admin/users.md): Server admins can view all users registered on the Tierity platform, manage their organization memberships, and control server admin privileges.
- [Plans and billing](https://docs.tierity.com/admin/billing.md): Tierity's plans, how to upgrade on Tierity Cloud, and how license keys unlock paid features on self-hosted instances.
- [AI Providers](https://docs.tierity.com/admin/ai-providers.md): Configure Anthropic or OpenAI API keys to enable the AI assistant and AI-powered features across Tierity. Manage provider settings from the server admin panel.
- [API introduction](https://docs.tierity.com/api-reference/introduction.md): Automate Tierity over HTTP: read findings and deadlines, manage members and invitations, and set SLA policies.
- [Authentication](https://docs.tierity.com/api-reference/authentication.md): Create API keys, use them as bearer tokens, and revoke them.
- [Organizations](https://docs.tierity.com/api-reference/endpoints/organizations.md): Read organizations, list and manage members, and send invitations.
- [Findings and SLAs](https://docs.tierity.com/api-reference/endpoints/findings.md): Read findings from every connected tool with their deadlines, and set the SLA policy for each severity.

## Optional

- [Tierity](https://tierity.com)
- [Discord](https://discord.gg/tcP2BREaWp)
- [Support](mailto:contact@tierity.com)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.