Feature Requests

I was having issues with Exporting to Wasabi but then gave up after finding out that the files are not encrypted. Any type of export should request a password before it exports. This is something that we had with ITG and it is a must for security.

With IIS, I can easily configure logs and generate reports on what and when an IP address has attempted to log in to a web site. We need this same functionality in Hudu since it doesn't run in IIS.

It would be great if we could have alerts when someone changes the public sharing on a document or generates a sharing URL for a password. This would be a good way for our management team to ensure that something isn't erroneously shared and allow for quick remediation if it is.

Enable non-administrative users to access the "Move Companies" feature.

We would like to make sure that some documents are accounted for (ie. HR) but that they are only accessible by HR.

Many sites can have multiple different URLs for login and usage. Password managers like 1Password and Bitwarden allow associating a password with multiple URLs for auto completion and filtering. Adding the ability to have multiple URLs stored in a password record would be very helpful.

We need to be able to use user groups to control access to core assets in the same way that you can with custom assets. There are many reasons this should be in place, but the most obvious is not all users with access to hudu should be able to see all the core assets for a given company they have access to.

We need a place to capture the common security questions and their answers. Having the ability to auto-generate an answer to the security questions would help provide an extra level of security. Include recommending not using publicly available information as the answers.

Add the ability to paste in a SSL certificate information and track the expiration. Not all sites are public facing but still use a public ssl certificate.

95% of the time, archiving the user and removing the license is perfectly fine and preferred. There are cases were we might need to delete a user account for testing, and currently we are not able to do that.