IdentityFirst MRI
The public-safe starting point: a read-only access review that shows what looks risky and what to fix first.
MRI is the first product in the range and the strongest place to begin. It connects to your existing systems in read-only mode, looks at who has access, highlights where that access no longer makes sense, and gives you a clear report to work from.
It is designed for the moment when a team knows access has become messy, but needs evidence, prioritisation, and a usable starting point before deciding what happens next. If you only evaluate one part of IdentityFirst first, this is the right place to start.
What MRI means
- It checks access without changing your systems.
- It shows who has access, what looks excessive, and where old access still exists.
- It highlights evidence-backed exposure patterns at an assessment level. Deeper graph and path analysis sits in Core+.
- It gives both management and technical teams a report they can use.
- It does not make write changes in the customer environment.
Launch-core connectors today: Entra ID, Okta, Google Workspace, and AWS IAM with CloudTrail enrichment. Active Directory is a controlled pilot extension rather than a blanket default.
What MRI is good at
MRI is designed to give you a useful first answer quickly, not to overwhelm you with jargon.
Find
It finds accounts, permissions, old access, guest access, and evidence-backed exposure patterns worth checking first.
Prioritise
It helps you see what matters first instead of treating every finding as equally urgent.
Explain
It creates reports that are easier to use in management, technical, audit, and client conversations.
Who it is for
Security and technology leaders
Teams that need a clearer picture of access risk before they commit to a bigger programme.
Risk, audit, and compliance teams
Teams that need usable evidence and a stronger narrative around who has access and why it matters.
MSPs opening an account
Providers that need a low-friction first engagement they can turn into a wider service relationship.
What MRI is not
Not an auto-fix tool
MRI is read-only. It shows the issues clearly, but it does not make live changes by itself.
Not the whole product range
MRI is the starting point. The later products add regular review, more guidance, and tighter control for customers that need it.