Decision Logs and Investigation

EnforceAuth ingests OPA decision logs so security and compliance teams can answer why was this denied? without SSH and grep across clusters.

Ingestion

OPA/EOPA instances send decision logs to EnforceAuth using API keys. Configure ingestion endpoints in your entity settings.

Console investigation

Filter by policy, outcome, time range, and system. Drill into a single decision for input, policy version, and evaluation result.

Audit export

Export decision evidence for SOC 2, HIPAA, and internal audits. See Audit evidence.

API

List and fetch decisions via the REST API — API Reference.