Customers
Teams that stopped handing out admin.
340
companies decide access in Clavra
1.9M
grants ended on schedule last year
41 s
median wait for an on-call engineer
Halden
Logistics payments · 900 people
Standing AWS admin went from 212 people to 9.
Halden’s platform team had given AdministratorAccess to anyone who needed it once. With Clavra, engineers ask for a permission set when they need one, on-call engineers are approved by policy, and admin grants need a second approver.
“The first week we denied four requests that would have been auto-approved before. None of them were malicious. All of them were bigger than the job.”
Maren Roth, Head of Security
Standing admin in AWS
Before
212
After
9
Morrow Health
Healthcare software · 350 people
Their HIPAA access review is now one export.
Morrow used to rebuild who-had-access-to-what from screenshots every quarter. Now every grant has an approver, a reason and an end time, and the auditor gets a signed CSV.
“Our last audit took an afternoon. The one before took three weeks and two contractors.”
Dev Anand, Compliance Lead
Quarterly access review
Before
3 weeks
After
1 day
Tessel Pay
Card issuing · 180 people
On-call engineers get production in 41 seconds.
Tessel links PagerDuty to Clavra, so whoever holds the pager can get read-write on the payments database for their shift without waking a manager.
“At 3 a.m. nobody wants to find an approver. Now the schedule is the approver, and the log shows it.”
Ines Carvalho, Staff SRE
Wait for prod access at night
Before
25 min
After
41 s
Leah Park
Security Engineer, Fieldnote
“We deleted our shared break-glass password. Break-glass is now a request with two approvers and a 30-minute timer.”
Tomás Rey
Head of Platform, Brightline Labs
“Offboarding used to be a checklist. Now there is nothing standing to remove.”
Nadia Okafor
IT Lead, Kestrel Insurance