Service account review software that shows who owns every account.

The IT Lead is service account review software for small IT teams and MSPs: import a CSV, name an owner for each account, and ask every owner by email to confirm or reject ownership. Each answer lands in a review trail an auditor can follow, without a full identity governance suite.

Plans start at $49 per month. A card is entered at Stripe Checkout. See pricing.

acme-it / service_accounts
214 rows · review Q4
IdentifierStatus
svc-backup-veeamAD · j.kellerReviewer accepted
sql-reporting-roEntra ID · m.ortizOwner attested
gh-actions-deployGitHub · no ownerUnknown owner
sp-intune-syncEntra ID · a.brandtOwner nominated
svc-print-legacyAD · r.hahnReview overdue
aws-billing-exportAWS IAM · s.ngPending
svc-sftp-payrollAD · l.vogtNeeds investigation
Example dataNot a live workspace

CSV row ≠ attestation ≠ reviewer decision

  • CSV

    CSV row. Imported data. Says an account exists in a file, nothing more.

  • ATT

    Attestation. A named owner confirmed ownership, purpose and need.

  • REV

    Reviewer decision. Your team accepted, questioned or reopened the owner answer.

Scope

One job, done carefully

The IT Lead records ownership and review decisions. It does not touch your directory.

Does

  • Import service accounts from CSV with validation and dedup
  • Nominate an owner per account and set a 30, 90 or 180 day review interval
  • Email each owner a personal, time-limited link to confirm or reject ownership
  • Collect owner answers: owns it or not, purpose, still needed, access review
  • Reviewer accepts, requests clarification, or reopens an answer
  • Keep an audit trail of who answered, when, and how
  • Download a campaign as CSV with every owner response and reviewer decision

Does not

  • Act as an IAM, PAM, or directory administration platform
  • Scan for vulnerabilities or issue compliance certifications
  • Disable accounts or rotate passwords
  • Perform SCIM writes or session invalidation
  • Store passwords, API keys, or access tokens
  • Claim technical verification from a CSV import

Workflow

From CSV to evidence in four steps

From file to owner answer to reviewer decision. No "all secure" badges.

  1. 01import

    Import

    Upload a CSV of service accounts. Preview row errors before committing; existing accounts are skipped.

  2. 02assign_owner

    Assign owners

    Nominate an owner for each account and set a review interval of 30, 90 or 180 days.

  3. 03request_attestation

    Request attestation

    Owners open a personal link, with no account needed, and confirm or reject ownership, purpose and whether access is still needed.

  4. 04review

    Review evidence

    Accept, request clarification, or reopen an answer. Download the campaign as CSV.

Evidence model

Different evidence types, labeled as such

A CSV row is imported data. An attestation is a person's answer. A reviewer decision is your team's judgment of that answer. Nothing turns green just because someone clicked confirm, and the app never checks your directory.

svc-backup-veeamExample
source
CSV import, 14 days ago
CSV
owner
Attested by j.keller@example.com
ATT
reviewer
Accepted by IT lead
REV
directory
Not checked by The IT Lead
--

Start tracking who owns what

Sign up, create a workspace, import a CSV, and send your first review request.