IdentityMRI

Active Directory

Complete AD health assessment including domain controllers, replication, Group Policy, permissions, and security configurations.

Azure RBAC & Entra ID

Cloud identity security assessment including conditional access policies, MFA configuration, privileged roles, and integration health.

AWS IAM

AWS identity and access management assessment including IAM users, roles, policies, and resource permissions across all accounts.

Google Cloud IAM

GCP identity assessment including service accounts, IAM policies, organisation structure, and resource hierarchy.

What IdentityMRI Does

Comprehensive Assessment: Deep analysis of your identity infrastructure without making changes

• Read-Only Analysis: Examines configurations, permissions, and policies safely
• Risk Identification: Discovers misconfigurations, over-privileged accounts, and compliance gaps
• Blast Radius Analysis: Shows potential impact of security issues
• Compliance Mapping: Links findings to frameworks like SOC 2, ISO 27001, GDPR
• Remediation Guidance: Provides specific, actionable steps to fix issues
• Executive Reporting: Audit-ready reports for stakeholders and auditors

What IdentityMRI Does NOT Do

No Automated Enforcement: We don't make changes to your systems or enforce policies

• No Policy Enforcement: Won't automatically disable accounts or change permissions
• No Real-Time Blocking: Doesn't prevent access or stop attacks in progress
• No Automated Remediation: Provides guidance, but you implement the fixes
• No Continuous Monitoring: Point-in-time assessments (can be scheduled)
• No Incident Response: Assessment tool, not a security operations platform

Honest Assessments

We admit what we know, what we infer, and what we don't know.

• Evidence-Based Findings: Every issue shows why it exists with specific evidence
• No Black-Box Scores: All risk assessments include detailed explanations
• Conservative Language: We avoid overconfident claims about intent or impact
• Clear Assumptions: When analysis relies on assumptions, we state them explicitly
• Unknown Factors: Gaps in data are flagged, not guessed or filled with AI

Trustworthy Results

Run IdentityMRI twice and get consistent, explainable results.

• Deterministic Scoring: Same input data produces identical risk scores
• Versioned Rulesets: Analysis rules are versioned and documented
• Timestamped Evidence: All findings include collection timestamps
• Change Diffing: Between scans, we show exactly what changed and why
• No Random Variation: Results don't wobble without environmental changes

Reliable Under Pressure

IdentityMRI works when you need it most - during incidents or audits.

• Data Confidence Indicators: Every finding shows scan completeness percentage
• Graceful Degradation: Partial data is flagged, not guessed or hidden
• Incident-Ready: Works at 2am during breaches, not just 9am on Monday
• No AI Guesswork: Unverifiable data gaps are clearly marked as such
• Conservative Approach: We'd rather miss something than misrepresent it

AI Analysis Capabilities

• Risk Scoring: Dynamic risk assessment with business impact
• Anomaly Detection: Identify unusual access patterns
• Threat Correlation: Connect disparate security events
• Compliance Mapping: Automated framework alignment
• Remediation Guidance: Prioritized action recommendations
• Predictive Analysis: Forecast potential security issues