Settings

Organization branding — including your logo on PDF reports — is available on the Pro and Enterprise plans.

Organization name

Displayed on the cover page of PDF threat model reports.

Organization details

Displayed on PDF report cover pages.

Appears in the footer of every PDF report page.

Organization logo

Replaces the ThreatTree logo on the cover page of PDF reports. PNG, JPG, SVG, or WebP — max 2 MB.

Current logo

Remove

Organizations give everyone on your company domain automatic edit access to all your team's forests — available on the Pro and Enterprise plans.

Create your organization

Register your company domain. Anyone with a email can be invited, and every member automatically gets edit access to every forest owned by the organization.

Organization

Audit log, data export, ownership transfer, SSO, SCIM provisioning, IP allowlisting, and data retention are in Organization Settings; Slack/Teams alerts, ticketing sync, the SIEM feed, and GRC evidence sync are in Integrations.

Members

Groups

Group teammates together so you can grant a whole team access to a forest at once, from that forest's Members panel, instead of inviting each person individually.

Custom roles

Limit what a Member can do on your organization's forests, for example an Auditor who can read everything and the activity log but change nothing. A role only ever narrows access: Owners and Admins are never restricted, and forests a Member owns themselves aren't affected. Assign roles from the Members list above. How it works

Invite a teammate

Only addresses can be invited.

These settings apply once you're part of an organization. Create or join one from Team first.

Linked organizations

For holding companies and MSSPs: see summary numbers for subsidiaries or client organizations in one place. Each organization's owner has to accept the link. You see counts only (members, forests, risks by severity, last activity), never their diagrams, risk details or member list. How it works

Parent organization

Roadmap requests

Tell us what ThreatTree should do next for your organization. Every request is read by the ThreatTree team and gets a status here (Under review, Planned, In progress, Shipped, or Not planned with a reason), and the person who submitted it gets an email when it changes. Everyone in your organization sees your organization's requests. How it works

Single sign-on (SSO)

SCIM provisioning

Data retention

IP allowlisting for sign-in

Integrations apply once you're part of an organization. Create or join one from Team first.

Slack / Teams alerts

Post critical-risk alerts to a Slack or Microsoft Teams channel, in addition to email. Paste an incoming-webhook URL from your channel's app settings.

Ticketing sync

SIEM feed

GRC evidence sync