Security
Mandatory MFA
Require AAL2 before sensitive campaign launch and configuration writes.
Separate Admin Surface
This console is the new home for response campaigns, trusted alert admin assignment, exports, provider contracts, and superadmin controls. Web and PWA stay focused on subscriber workflows.
Security
Mandatory MFA
Require AAL2 before sensitive campaign launch and configuration writes.
Boundary
Separate domain
Deploy to manage.iseverythingsafe.com to remove admin routes from the consumer shell.
Cutover
Delete, don't hide
Once this console is live, the old trusted-alert admin and superadmin pages should be removed from web and PWA entirely.