Overview
The Netlify integration monitors your team’s sites, deployments, member access, and security configurations. LowerPlane syncs site data, deployment history, environment variables, and domain settings to evaluate your deployment security posture.Authentication
Netlify uses OAuth 2.0 for authentication. When you connect, you’ll be redirected to Netlify to authorize LowerPlane.Required Permissions (OAuth Scopes)
| Scope | What It Grants | Why LowerPlane Needs It |
|---|---|---|
read | Read account and site data | Access site metadata, deployments, and configurations |
write | Write access (used for webhook registration) | Register sync webhooks for real-time updates |
LowerPlane uses the
write scope only to register webhooks for automated sync triggers. It does not modify your sites, deployments, or configurations.What LowerPlane Collects
Sites
Site inventory with deployment settings, custom domains, and build configurations
Deployments
Deployment history with status, branch, and commit information
Team Members
Member list with roles for access reviews and offboarding checks
Domains
Custom domain configurations and SSL/TLS status
Environment Variables
Environment variable inventory (names only, not values) for secrets management auditing
Build Hooks
Build hook configurations for deployment pipeline auditing
Forms
Form configurations and submission handling settings
Functions
Serverless function inventory and deployment status
Critical System Access
Netlify is automatically registered as a critical system in your access review program. Team members are synced with their roles, enabling:- Periodic user access reviews
- Offboarded employee detection
- Role-based access monitoring
Security Tests
| Test | Severity | Description |
|---|---|---|
| User access should be valid | High | Verifies all Netlify team members are identified |
| Access should be removed for offboarded users | Critical | Detects terminated employees with active access |