Security Events
Security Events provide a per-organisation audit trail of administrative actions taken in your Enclave account. Every change to your organisation's configuration is logged, including who made the change and when.
Accessing Security Events¶
Security Events are available in the Enclave Portal under Audit > Security Events in the left sidebar. The five most recent events also appear in the Recent Activity section on your organisation's dashboard.
What is logged¶
The following categories of event are recorded:
| Category | Events |
|---|---|
| Account | Login, login with 2FA, login with recovery code, failed 2FA, failed recovery code, password reset, password change, 2FA enabled/disabled, registration, email verification, joined/left organisation |
| Organisation | Sent invite, deleted invite, updated details, upgraded plan, increased billable systems/gateways |
| Policy | Created, enabled, disabled, deleted, updated, expired |
| System | Enrolment approved/unapproved, enabled, disabled, revoked, updated, expired |
| Enrolment Key | Created, deleted, updated, enabled, disabled, IP address rejection, no uses remaining, expired |
| Tag | Created, updated, deleted, renamed |
| DNS Zone | Created, deleted, updated |
| DNS Record | Created, deleted, updated, auto-created, auto-deleted, auto-conflict |
| Trust Requirement | Created, deleted, updated |
Each event records:
- Timestamp in UTC
- Level (Information, Warning, or Error)
- Message describing the action taken
- User who performed the action (email address, or
enclave-botfor automated actions)
Using Security Events¶
Security Events are useful for:
- Change verification. Confirming that a policy, tag, or trust requirement change was applied as intended.
- Incident investigation. Identifying who revoked a system, disabled an enrolment key, or modified a policy.
- Compliance. Providing an auditable record of administrative actions for security reviews.
Events are scoped to the organisation you are viewing. If you manage multiple customer tenants, you will see separate Security Events for each tenant when you access it through the Enclave Portal.
Last updated July 22, 2026