SnagBaneThe Enterprise plan is Business plus a security package for regulated companies. It streams the audit log to your SIEM, provisions users with SCIM, restricts SnagBane to your networks, deletes old data on a schedule, limits sign-in to chosen groups and switches off accounts when people leave. It also includes a second licence activation for a staging server.
Audit log to your SIEM
Every audit entry is sent within a minute — without an agent — to Microsoft Sentinel (Logs Ingestion API), Splunk (HTTP Event Collector), Elastic (bulk into a data stream) or any HTTPS endpoint (HMAC-signed). It's also written as flat JSON lines to a daily file that log agents read directly. Settings → Security → Send the audit log to your SIEM.
SCIM provisioning (Entra ID, Okta)
Switch on SCIM, create a token and give your identity provider the address /api/scim/v2. People assigned to the app get an account; name, job title, department and manager stay up to date; unassigned people are switched off (signed out everywhere, their forms and answers kept). Groups pushed from the provider can be used for workspace access, approvers and roles. Provisioning never changes roles, and the last active owner can't be switched off.
IP allowlist
SnagBane answers only requests from the listed addresses and ranges (IPv4/IPv6, CIDR). By default this covers the signed-in app and sign-in; you can include public forms, portals and approval links, and the REST API and SCIM. You can't save a list that leaves out your own address, and php artisan snagbane:ip-allowlist off is the way back in.
Data retention policy
Old responses deleted automatically after the period you set, per organisation and per form — see GDPR and data retention.
Who can use SnagBane
Limit sign-in to up to 20 Entra ID or Google groups (nested groups count) or chosen Okta groups. Others are refused at sign-in and left out of person search; owners and admins can always sign in.
People who leave
After each directory sync, SnagBane checks accounts that disappeared — confirmed one by one with Microsoft, Google or Okta — and switches off those that were deleted or disabled. Nothing is deleted: their forms keep collecting responses, and Hand over moves their forms and portals to someone else. If unusually many people disappear at once (a reorganisation, a test tenant), SnagBane waits for an administrator to confirm.
Frequently asked questions
Does Business include any of this?
Business includes single sign-on, groups and directory features. The security package — SIEM, SCIM, IP allowlist, retention, group-limited sign-in and offboarding — is Enterprise only.
How much is Enterprise?
From €4,600 per year for up to 100 people; see pricing.
See Send logs to a SIEM and Security features in the documentation.
