SECURITY THAT FOLLOWS THE QA WORKFLOW

Give access by responsibility.
Keep project execution under control.

AXQA separates workspace administration from project participation so teams can manage people, projects, execution, and client visibility without treating every user the same. Access stays connected to the project context, while sensitive administrative and execution actions remain controlled.

Access Context
WORKSPACE + PROJECT
ACTIVE PROJECT Checkout Platform QA
Active
Privileged Administration Administrative and security responsibilities
WORKSPACE
Project Owner Owns the project context and its QA workflow
PROJECT
Team Member Participates in authorized team projects
MEMBER
Workspace User Access follows project visibility and participation
SCOPED
ACCESS DECISION User + project + participation + action
Privilege Separated
Administrative access is distinct from ordinary project participation.
Project Scoped
Visibility follows project type, ownership, membership, and active project context.
Execution Controlled
Being able to see project information does not automatically grant execution rights.
Activity Traceable
Security-relevant events and controlled access activity remain available for review.
THE ACCESS MODEL USED BY THE PLATFORM

Workspace privilege and project access are two different decisions.

AXQA uses workspace-level administrative privilege together with project-level ownership and membership. This keeps administrative capability separate from the day-to-day QA access a person needs inside a project.

WORKSPACE LEVEL

Administrative privilege

Administrator and Super Administrator accounts handle elevated workspace responsibilities. Privileged accounts are subject to additional verification requirements before elevated access is used.

USER STATE

Active workspace users

Users must remain active to access the workspace. Deactivation removes workspace access without changing the historical QA records already associated with their work.

PROJECT LEVEL

Ownership and membership

Project owners and team members provide the project-specific participation layer. The active project is checked before protected project operations continue.

PROJECT VISIBILITY Private, Team, and Public projects
Visibility and execution are evaluated separately
PRIVATE Restricted project context

Designed for tightly limited project visibility centered on ownership and privileged oversight.

TEAM Membership-driven participation

Project membership creates a controlled team boundary for viewing and carrying out authorized QA work.

PUBLIC Broader authenticated visibility

Public project visibility can be broader, while execution still requires its own authorization rather than visibility alone.

WORKSPACE SECURITY CONTROLS

Protect access without exposing implementation details.

The AXQA workspace includes security controls around sign-in, privileged access, network access, inactive sessions, and security event visibility. These controls are managed as workspace features rather than being embedded into individual test cases.

ACCESS 01

Sign-in protection

Repeated unsuccessful sign-in activity can be restricted so suspicious access attempts do not continue indefinitely.

ACCESS 02

Privileged verification

Elevated administrative accounts require an additional verification step before privileged workspace access is used.

ACCESS 03

Workspace network controls

Organizations can restrict workspace access to approved network locations when their operating policy requires it.

ACCESS 04

Session inactivity control

Workspace sessions can be ended after configured inactivity so unattended access does not remain open indefinitely.

SMART AGENT EXECUTION

Keep local execution inside approved project boundaries.

Smart Agent extends an AXQA workflow into local or restricted environments without turning that path into unrestricted access. Execution is tied to the active project and evaluated against the project’s approved execution policy before the request is allowed to continue.

01
QA CONTEXT

AXQA Workflow

Test structure, execution intent, validation, and project context stay connected to the platform.

approved work
02
PROJECT POLICY

Execution Decision

The local execution path checks whether the requested destination is inside the project’s approved boundary.

APPROVED PATH
local execution
03
LOCAL ENVIRONMENT

Smart Agent

Approved QA work runs where the customer has authorized the target to be tested.

CONNECTED RESULT Execution status returns to the same AXQA project history and reporting context.
ILLUSTRATIVE SECURITY FLOW

Watch an access decision move from request to outcome.

This animation is a simplified product illustration. It shows the public behavior of an access decision without exposing internal security implementation details.

01 · REQUEST QA action requested

The requested work stays attached to its AXQA project context.

02 · CONTEXT Project access evaluated

The platform checks that the request still belongs to an accessible project context.

03 · DECISION Execution scope reviewed

Visibility alone does not decide execution; the requested action must remain inside its allowed scope.

04 · OUTCOME Ready for decision

Run the illustration to see an approved or stopped outcome.

CONTROLLED CLIENT SHARING

Share project visibility without opening the workspace.

AXQA supports project-scoped shared access for client visibility. Shared access can be limited to intended recipients, disabled or revoked when needed, and reviewed through access activity records without giving the recipient a normal workspace account.

SECURITY VISIBILITY

Keep security-relevant activity visible to the people responsible for it.

The platform includes security event tracking and policy-change history so privileged users can review access-related activity without mixing it into ordinary test execution results.

SECURITY EVENTS

Security Log Tracker

Security-related workspace events are recorded so privileged users can investigate unusual access activity.

POLICY CHANGES

Controlled change history

Sensitive Smart Agent policy changes are tracked and can require additional verification before they take effect.

PROJECT CONTEXT

Current-project guard

Protected project operations validate that the selected project still exists, is active, and remains accessible to the user.

EXECUTION ACCESS

Separate execution permission

Execution authorization is evaluated separately from simple project visibility so seeing a project does not by itself authorize a run.

SECURITY THAT MATCHES THE PRODUCT

Control the workspace.
Keep QA practical.

AXQA combines administrative privilege, project participation, controlled execution, client sharing, and security visibility without exposing the implementation details behind those controls.