Changelog

Luna can now analyse access reviews evidence like screenshots and CSV’s to automatically detect discrepancies between the uploaded evidence and what’s in Ploy ensuring you’re reviewers are using the most up to date information and your auditors are kept happy.

We've added 8 new integrations in the last 10 days: Zendesk, GitLab, Airtable, Miro, SIIT, Intercom, HubSpot, and Notion.

Connect any of these and Ploy will automatically discover all user accounts across your team.

• Zendesk

• GitLab

• Airtable

• Miro

• SIIT

• Intercom

• HubSpot

• Notion

We’re really excited to release our Profiles feature which give you the ability to group users by any combination of attributes, not just their role. Instead of rigid RBAC rules like "Engineers get access to XYZ," you can now define precise conditions like "Active, full-time engineers with GitHub access and MFA enabled get access to XYZ."

It's access management that actually reflects how your company works.

To get started with profiles or to learn more about them, you can read our help docs here: 

https://help.ploy.io/articles/profiles-dsfeg

Using the brand new Luna Page and the new ‘Generate automation flow’ playbook, you can describe your desired workflow in natural language and have Luna automatically generate the flow for you.

Disclaimer: This feature is very much in beta and Luna will most likely make mistakes. Verify every workflow Luna generates.

We’re excited to announce that we’ve released the first version of the Ploy api, allowing you to programmatically interact with Ploy. This is great for pulling data from Ploy automatically, or managing configurations via IaC tools like Terraform.

This is currently in beta so if you’d like access don’t hesitate to reach out to the team.

Luna can now automatically generate access catalogs for you. Whether you're going through initial setup or managing catalogs day-to-day, Luna can create the catalog structure you need in seconds rather than hours. Catalogs allow you to define targeted sets of resources that employees can request access to.

How it works

You have two options:

1. Let Luna take the wheel - Luna will analyse your historical access patterns and generate a complete suite of catalogs tailored to your organisation

2. Request specific catalogs - Tell Luna exactly what you need and it will create catalogs to match

Everything Luna creates starts in draft, so you have full control to review and refine before publishing.

Regeneration with context

Not quite right? You can regenerate your catalogs with additional context to guide Luna toward better results. This is particularly powerful for fine-tuning the output to match your specific needs. Note that regenerating will replace any AI-generated catalogs currently in draft.

Fresh new look

We've also refreshed the catalog list with a more vibrant design to make managing your catalogs a better experience.

This is an early release - we'll be tuning Luna's catalog generation based on your feedback, so please experiment and let us know how it goes.

We’ve added 3 new offboarding actions for Microsoft based identities in Ploy, Revoking sessions/sign-ins, Removing MFA devices and removing entra connected mobile devices.

This is a great way to further secure you’re identities post offboarding. To get started with these create a flow using any of these actions

For Slack Business+ and Enterprise Grid customers, Ploy can now automatically provision and deprovision users. When someone joins your company or changes role, their Slack access follows automatically. When they leave, it gets revoked. No more chasing IT tickets or finding out three months later that a former employee still has access to your channels.

Enterprise Grid customers can also create single and multi-channel guests directly from Ploy, which is handy for managing contractors, vendors, or anyone else who needs limited access without a full account.

Improved usage data

We now pull in Slack session history alongside the existing metadata. This means you can:

• See when someone last actually used Slack, not just when their account was created

• Spot dormant accounts that might be worth reclaiming (or investigating)

• Flag dangling access during reviews. If someone hasn't logged in for 90 days, that's probably worth a conversation

This is especially useful for access reviews where you're trying to work out whether someone still needs access or if they've quietly moved on to a different team.