Start with clarity. Grow into ongoing control only when you need it.
IdentityFirst is built around a simple progression. Start with IdentityFirst MRI as the public GA read-only exposure review, then move into IdentityFirst Core only if you need recurring governance, with IdentityFirst Enhanced and IdentityFirst AISF kept as later private-beta layers.
It is not about implying that every layer is broadly available today. It is about giving buyers a credible first step, an honest controlled rollout path, and a clear view of what remains later-stage.
A low-friction first review they can approve quickly.
A clearer way to explain access risk to operators, boards, and auditors.
An ongoing rhythm if they want reporting and governance after the first assessment.
A product path that can grow with them without inflating the first promise.
Four-product progression
Start with proof. Expand only when you need more.
The shared foundation stays the same. What changes is how much regular review, guidance, and bounded human-governed workflow you want around it, and whether that layer is GA, controlled rollout, or private beta today.
The image carries the hierarchy quickly: MRI as the public GA anchor, later product stages above it, and one shared foundation beneath them.
GA now
IdentityFirst MRI
The public entry point: a read-only review of access exposure, stale permissions, and the clearest first action.
Best for: getting a clear starting point without changing customer systems.
Each part of the delivery model has a different job.
Most buyers do not need deep architecture detail. They just need to know why the website, working portal, rules layer, and shared foundation do not contradict each other.
Website and demo
This is where the company explains the offer, shows representative journeys, and sets honest expectations.
Working portal
This is where operators and customers use the live product for runs, reports, governance, and follow-up work.
Rules and workflows
This is where approvals, governed workflows, connector execution boundaries, and service control are handled behind the scenes.
Shared foundation
This is what keeps access data, findings, evidence, and later actions working from the same picture rather than drifting apart.
Screenshots are being prepared. Check back shortly.
Architecture reference
How the platform works under the hood.
Three diagrams for engineers, security teams, and technically-minded buyers who want
to understand service boundaries, evidence integrity, and licence-tier enforcement
before committing to a proof of concept.
inside the document body.
$svg_content = preg_replace('/^<\?xml[^?]*\?>\s*/s', '', $svg_content);
$meta = DIAGRAM_META[$slug];
// Sanitise strings used in HTML attributes (all are static constants, but
// belt-and-suspenders).
$esc_title = htmlspecialchars($meta['title'], ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$esc_caption = htmlspecialchars($meta['caption'], ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$esc_aria_label = htmlspecialchars($meta['aria_label'], ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$esc_slug = htmlspecialchars($slug, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
?>
inside the document body.
$svg_content = preg_replace('/^<\?xml[^?]*\?>\s*/s', '', $svg_content);
$meta = DIAGRAM_META[$slug];
// Sanitise strings used in HTML attributes (all are static constants, but
// belt-and-suspenders).
$esc_title = htmlspecialchars($meta['title'], ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$esc_caption = htmlspecialchars($meta['caption'], ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$esc_aria_label = htmlspecialchars($meta['aria_label'], ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$esc_slug = htmlspecialchars($slug, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
?>
inside the document body.
$svg_content = preg_replace('/^<\?xml[^?]*\?>\s*/s', '', $svg_content);
$meta = DIAGRAM_META[$slug];
// Sanitise strings used in HTML attributes (all are static constants, but
// belt-and-suspenders).
$esc_title = htmlspecialchars($meta['title'], ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$esc_caption = htmlspecialchars($meta['caption'], ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$esc_aria_label = htmlspecialchars($meta['aria_label'], ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$esc_slug = htmlspecialchars($slug, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
?>
What the product family is not
Blast radius is important. It is not the whole company story.
IdentityFirst spans identity discovery, governance, evidence, reporting, assisted analysis, and guarded action workflows. MRI does not need to promise the full depth of every later layer to be a credible public starting point.
