Implemented product system / Flagship evidence
VantaBlade Workforce Exposure
An authenticated multi-tenant SaaS product that turns employee identity-exposure data into incidents, identity cases, remediation workflows, and reporting.
System overview
VantaBlade Workforce Exposure is the strongest integrated product-system evidence in the VantaBlade environment. Customer software, typed frontend/backend integration, tenant authorization, relational data, external providers, background work, domain workflows, reporting, analytics, and operator tooling operate together in one implemented system.
Product problem
Raw provider findings are not an operational product. Organizations need stable employee inventory, a way to distinguish known history from newly observed findings, identity-level cases, remediation state, and reporting that preserves what changed and what still needs attention.
Engineering scope
- Next.js, React, and TypeScript customer interfaces with typed API contracts
- Python and FastAPI services with authenticated route and domain boundaries
- Supabase Auth, PostgreSQL, Row Level Security, and tenant-scoped persistence
- Employee inventory, entitlements, trials, scan lifecycle, incidents, and identity cases
- Background exposure scans, provider boundaries, normalized findings, and net-new detection
- Reports, first-party analytics, notifications, and internal operator tooling
High-level architecture
From product input to durable outcome.
- Employee inventory
- Exposure scan
- Normalized findings
- Net-new detection
- Incidents
- Identity cases
- Remediation
- Reporting
Important system boundaries
- The frontend renders state; tenant access, limits, scan claiming, and workflow transitions remain backend responsibilities.
- Provider observations are normalized before they become persisted exposures, incidents, or identity cases.
- Customer routes use user and tenant context; protected background operations use separate system authority.
- Stored product-access state exists, but B2B payment processing is not claimed as an implemented authority.
Capabilities demonstrated
- Authenticated multi-tenant SaaS across customer and operational interfaces
- Backend-authoritative entitlement, trial, capacity, and lifecycle rules
- Queued scan execution, provider warnings, stable fingerprints, and recovery state
- Employee-level incident aggregation and remediation lifecycle
- Persisted operational facts, generated reports, and first-party funnel analytics
Reliability, authority, and privacy
- Tenant scope is constrained through API checks and PostgreSQL Row Level Security.
- Stable exposure fingerprints and incident keys distinguish repeat observations from newly persisted findings.
- Queued/running conflict checks, atomic claims, and stale-job recovery bound background execution.
- AI-assisted narrative sits around deterministic facts and never replaces authorization or lifecycle authority.
Transferable engineering patterns
- Authenticated multi-tenant SaaS and organization workspaces
- Inventory-to-case, assessment, and compliance workflows
- Entitlements, trials, provisioning, and lifecycle access
- Background jobs, schedulers, job claims, and recovery
- Reporting, analytics, operational controls, and document delivery
Related focused public proofs
Inspect selected patterns independently.
These repositories demonstrate related patterns. They do not reproduce the complete product or imply code identity.
Engineering / Next action
Built this pattern into your own product?
Discuss a bounded product system, integration, workflow, or applied-AI capability with VantaBlade Engineering.