Investigative platforms tend to grow until every installation has every feature, whether the work needs it or not. That is convenient for a demo and bad for governance: a capability that is present is a capability someone can use, and a case that carries tools it does not need is harder to justify when someone asks what was done.
Plugins are how Engramite avoids that. Specialist tools are added or removed per case, and each one carries its own permissions.
Capability as a decision
Selecting capabilities at the start of a case is part of scoping. A background check on a company does not need the same toolkit as an incident investigation or an authorised awareness exercise. Choosing deliberately produces a record of what the investigation was equipped to do — which is the first thing a reviewer asks about.
Permissions per capability
Each capability carries its own permissions rather than inheriting a blanket grant. The practical effect is least privilege at the level of the task: a case that has no business touching a sensitive capability simply does not have it.
That is also what makes the sensitive capabilities safe to offer at all. Anything touching personal data at scale should be something a case opts into, under authorisation, not something that is merely present by default.
Fewer moving parts per case
There is an ergonomic benefit too. An analyst working a narrow case sees a narrow workspace. The agent plans against the capabilities that are actually available, so the plan stays inside the scope you set.
Add-ons
Beyond the built-in catalogue, add-ons extend the workspace for particular kinds of work. The principle is the same: installed deliberately, permissioned individually, visible in the record.
Frequently asked questions
Can capabilities be changed mid-case? Yes, and the change is part of the case record.
Does turning something off hide past findings? No. What was admitted stays in the case file with its provenance.
Is there a catalogue I can review before buying? Ask us for the current capability list for your use case: [email protected].
Read next: Integrations or what Engramite is.