NEWFreshservice is now a Ploy integrationSee what shipped
1.0POLICIES

One policy engine for every access decision and identity.

A single place to define who should have access to what and under which conditions, applied everywhere access decisions are made: access requests, joiners, movers, leavers, authentication, reviews, humans, machines and agents.

“Should this identity have this access, right now?” Every Ploy workflow starts with the same question and gets its answer from the same policy engine.

1.1ONE LANGUAGE, EVERYWHERE

Write the rule once.

One policy language covers every identity and resource: people, teams, service accounts and agents; apps, groups, roles and resources. The same rule approves an access request, provisions a joiner, guides a review and sets the limits an agent works inside.

Everyone in DesigngetsFigma, Slack, Notion and Google Workspace

SUGGEST ONLY

Contractorsnever getAWS production

Gets. Never gets. Can request. Cannot request.

Each rule reads as a plain sentence, and the same grammar can govern the whole estate.

THE POLICY DECIDESEvery request meets the same rule before a person does.
Grace Okaforopens the catalogAVAILABLESupport may ask for Zendesk, so Zendesk is in her catalog.
Ravi Shahasks for DatadogAUTOMATICEngineering gets Datadog: the policy answers, nobody is interrupted.
Tom Ligetiasks for AWS — PowerUserREVIEWEDOutside the rule, so a named person decides with the evidence attached.
Erin Valeasks for AWS productionDENIEDContractors never get AWS production. A deny beats any grant.

Change the rule and every one of these answers changes with it.

One rule, every determination

A request policy decides what a person can ask for, what is granted without anyone being interrupted, what a reviewer sees, and what is never allowed.

Everyone in Design gets Figmapolicy
Priya RamanFigma — EditorLena FischerFigma — EditorMaya OseiFigma — Editor
Policy removed · access untouched

Deleting a policy is not deleting access

Removing a rule stops it explaining anything. The access people already hold is untouched, and the history is kept.

1.2THE LIFE OF A RULE

Luna writes the first draft. You decide how far it acts.

Luna finds the access patterns your organisation already repeats and turns them into suggested policies, each with its evidence, its counter-evidence and its blast radius. Scroll one rule from noticed pattern to enforcement.

Managed AccessPOLICY · DESIGN / FIGMASUGGESTED

DESIGN · 16 PEOPLE

14 hold Figma already.

Everyone in DesigngetsFigma

14 OF 16 ALREADY HAVE IT12 USED IT THIS MONTH2 NEVER SIGNED IN
BLAST RADIUSConfirm

It records decisions and touches nothing, so you can afford to write the rule before you are certain.

Ana Reyes joined DesignFIGMA GRANTED · BY POLICY
GOVERNED 78%
1.3COVERAGE

Know where access is still unexplained.

Every grant is one of three things: governed by a rule, a recorded exception, or something that needs attention. The unexplained portion is a queue Luna helps you work down.

Policy explains78%Exceptions13%Unexplained9%
Avantia Law
“Ploy has transformed how we do access requests & we wouldn't be able to go back to the way it was.”
Peter F.Head of IT & Infosec, Avantia Law
Read the story
Liberis
“Ploy has enabled us to completely automate employee onboarding and offboarding, saving us 150 manual actions, clicks, and hours of time per employee.”
Paul HartHead of IT, Liberis
Welcome to the Jungle
“With Ploy, we've turned a tedious weekly task into easy automated flows. We're saving half a day a week and have completely streamlined onboarding across all our SaaS tools. Total game changer.”
Devon BrownSenior IT Engineer, Welcome to the Jungle
Luno
“Ploy saved me from drowning in spreadsheets, manual licence assignment and SaaS sprawl. It lets us easily make sense of what's being bought, used, and wasted which is more than I can say for most software tools. The best part? They listen, iterate fast, and don't take themselves too seriously. Perfect match.”
Simon FishleyGlobal IT Director, Luno
Read the story

One policy engine. Access that stays correct everywhere.

See how Ploy turns your current access into policies that power requests, lifecycle changes, reviews and remediation.