1. Overview

Gorilla provides a software-as-a-service platform designed to enhance visibility, governance, and security management of Customer’s 1Password tenant.

The platform analyzes and contextualizes data related to resources within the connected 1Password tenant, including users, vaults, items, groups, permissions, configurations, and related activity.

Gorilla is intended to support IT, cyber information security, and risk management teams in governing the lifecycle of secrets and access, including creation, usage, sharing, rotation, and deprovisioning. The Services support security, risk management, and operational decision-making, but do not replace Customer’s own security controls, monitoring, or compliance obligations.


2. Functional Scope

The Services may include, without limitation, functionality in the following areas:

a) Security Posture Analysis

Analysis of configurations, permissions, usage patterns, and security-relevant signals within the connected 1Password tenant in order to assess overall secrets security posture.

b) Risk Detection and Findings

Identification and surfacing of potential security risks, misconfigurations, policy violations, or hygiene issues, presented as findings with contextual information and remediation guidance.

c) Access and Permission Analysis

Visualization and assessment of access relationships across users, groups, vaults, items, and related resources to support access reviews, audits, and least-privilege initiatives.

d) Operational Workflows

Case-based workflows supporting security-relevant operational processes, such as user offboarding, access changes, or incident-related reviews, including tracking of remediation activities.

e) Inventory and Visibility

Structured views of users, items, vaults, groups, devices, and other relevant tenant resources to enable exploration, filtering, and reporting.

f) Administrative Configuration and Reporting

Administrative configuration of rules, thresholds, and settings, as well as reporting and audit-supporting capabilities.