Threat Detective works best when RA/QA and software people share the same workspace: engineers upload SBOMs from CI while regulatory leads triage findings and export reports.
Send an invitation
Go to your organisation's Members tab.
Click Invite Member.
Enter the colleague's email address and choose a role.
Send. They'll receive an email with an Accept Invitation link.
Invitations expire after 7 days. From the Members page you can Resend or Cancel any pending invitation.
Roles
Member: can view projects and data, and can create and upload software items, versions, components and SBOMs. Members can't create or delete projects, manage members, or change organisation settings.
Admin: everything a member can do, plus create, edit and delete projects, edit organisation settings, and invite or remove members. Admins can't change other admins or remove owners.
Owner: the person who created the organisation. Owners can do everything, including changing admin roles. The last owner can't be removed.
A practical split: engineers as Members, your RA/QA lead as Admin.
Accepting an invitation
The invitation must be accepted from an account with the same email address it was sent to. Colleagues without an account yet are asked to create one first, then the invitation completes automatically.
If a link has expired or already been used, the page shows "This invitation link is invalid or has expired". Just send a fresh invitation.
Limits
Trial organisations can have up to 5 members, counting pending invitations. Paid plans have no member limit.