The Client Management section in Settings is designed for MSSPs who manage multiple clients within a single Qevlar instance. Each client added here operates with its own dedicated environment, ensuring clear separation of data, and configurations.
Adding a Client
- Click Create Client to add a new client to your Qevlar instance.
- Each client created will have its own:
- Unique configuration (integrations, log sources, and investigation context)
- Dedicated API keys for secure integration
- Isolated memory and context items that apply only to that client
- The new client will appear in the Clients list, along with:
- Client Name
- Added By (the user who created it)
- Date Added
Managing Clients
The Clients list provides an overview of all clients managed within your Qevlar environment. From here, you can:
- Search by client name to quickly locate a client
- View details of who added the client and when
- Access client-specific settings (integrations, context rules, and API keys are unique to each client)
Key Benefits
- Isolation: Each client’s data, integrations, and API keys are fully segregated.
- Flexibility: Configure integrations (e.g., SIEM, EDR, SOAR tools) per client, without affecting others.
- Scalability: Easily add new clients as your MSSP business grows.
- Security: Client-level separation ensures one client’s configuration or data cannot impact another.
Best Practices for MSSPs
- Use clear and descriptive client names for easy identification.
- Regularly review and audit client settings to ensure configurations are up to date.
- Assign appropriate roles to internal users managing each client to maintain least-privilege access.
- Keep client-specific API keys documented with comments to track their purpose and integration points.