Orvaron pulls every entitlement from Okta, Google Workspace, GitHub, AWS, and 50+ SaaS apps, runs a quarterly review your managers finish in days, and executes each revocation in the source system. The evidence file for your auditor builds itself.
Pre-launch. Design partners get hands-on onboarding and pricing locked through 2027.
Departed employees keep working access to at least one company system after offboarding.
What a typical 500-person company burns per quarter running access reviews out of spreadsheets.
Access control failures rank among the most common SOC 2 audit exceptions, year after year.
Directional figures from published industry research on identity sprawl and audit outcomes.
Product
Building the entitlement list, chasing sign-off, making revocations happen, keeping proof. Orvaron owns all four.
Connect Okta, Google Workspace, GitHub, AWS, and 50+ SaaS apps. Orvaron keeps a live inventory of who holds what, down to the GitHub org role and the IAM policy, and flags anything untouched for 90 days.
Each reviewer sees only their own reports, with plain-language descriptions instead of raw scope strings. Approve or revoke in one click. Reminders and escalation handle the stragglers, so campaigns close in days, not the whole quarter.
Click Revoke and Orvaron calls the source system's API. Okta group pulled, GitHub seat downgraded, IAM policy detached. Every action is logged with the timestamp, the actor, and the API result.
How it works
OAuth into Okta or Google Workspace, then your apps. No agents, no CSV imports. Read-only scopes by default; you grant write access per system, when you are ready.
first full inventory in under an hour
Pick the systems and a deadline. Orvaron routes every entitlement to the right reviewer, pre-flags dormant and high-risk access, and chases sign-off so you do not have to.
quarterly, or any cadence you set
Every decision, reviewer, timestamp, and executed change lands in one bundle mapped to SOC 2, ISO 27001, and SOX controls. Hand your auditor a file, not a meeting.
CSV and PDF, per campaign
Pricing
Flat monthly pricing by company size. No per-seat math, no per-connector fees.
For teams heading into their first SOC 2
$299/mo
Up to 200 employees
For companies with real audit calendars
$799/mo
Up to 1,000 employees
For 1,000+ employees and regulated industries
Custom
Annual agreement
Billed annually. Design partner pricing holds through general availability.
FAQ
Yes. When a reviewer clicks Revoke, Orvaron makes the change through the source system's own API: it removes the Okta group membership, downgrades the GitHub role, detaches the AWS IAM policy. You get a log entry with the API response and the before and after state, so "revoked" means revoked, not "someone should get to that."
For the small set of apps with no write API, Orvaron opens a tracked task and holds the item open until a human confirms the change. Nothing silently falls through.
You decide, per connector. Every integration works read-only, which covers inventory, campaigns, and evidence. Write scopes are opt-in, granted system by system, and limited to deprovisioning actions like removing a group membership. Many teams run their first campaign fully read-only and turn on execution once they have watched it work.
A per-campaign bundle: the entitlement population at campaign start, every decision with the reviewer's identity and timestamp, proof that each revocation executed, and a mapping to SOC 2 CC6.1 through CC6.3, ISO 27001 A.5.18, and the access sections of your SOX ITGCs. Delivered as CSV and PDF, so it drops straight into whatever portal your audit firm uses.
About an hour of your time. Connectors are OAuth, most apps link in under five minutes each, and the first full inventory is usually ready the same afternoon. There is nothing to install and no schema to maintain.
It is the cheapest moment to start. Auditors sample historical review cycles, so beginning now means your first audit period already contains clean evidence instead of a reconstructed spreadsheet. And pulling dormant admin access out of production is worth doing whether or not an audit is on the calendar.
We are onboarding a small group of design partners ahead of launch. Tell us your stack and your audit date, and we will tell you honestly whether Orvaron fits.