Contain Identity Threats
Before They Become Breaches
FortifyX™ gives your security team the tools to detect, model, and contain identity-based threats — without guessing the blast radius.
- Blast radius modelled before every action
- Human-in-the-loop approval on all writes
- Tamper-evident forensic audit chain
- Full rollback capability
- SOC 2 CC7.2 aligned
FortifyX™ Capabilities
Five engines for identity-based threat containment.
Blast Radius Engine
Before any containment action, model the full blast radius. Who else would be affected? What downstream access? Approve or reject with complete context.
Forensic Evidence Engine
Capture and preserve evidence of identity-based incidents. Timestamped, tamper-evident HMAC-SHA256 audit chain. SOC 2 CC7.2 aligned.
Identity Twin Simulation
Simulate attacker lateral movement using an identity twin. Understand reachable assets and blast radius without touching production systems.
Secrets Posture Engine
Scan for exposed credentials, leaked API keys, and standing PAM access. Score your secrets hygiene and prioritise remediation.
Incident Workflow Orchestrator
Structured incident response with approval gates, rollback capability, and full audit trail. Every action is journaled and reversible.
Anomaly Detection
Behavioural anomaly detection across your identity events. Fires into the FabricAgents pipeline for real-time alerting via WebhookEventBus.
No Automated Writes. Ever.
All containment actions in FortifyX™ require explicit human approval. The approval workflow engine enforces a human-in-the-loop gate on every write action — account disablement, access revocation, or credential reset.
- Blast radius shown before approval prompt
- Approver sees full context: identity, risk score, affected downstream
- Every approved action is journaled with rollback capability
- Auto-approval threshold configurable (max risk score)
- Timeout escalation if no response within configured window
Technical Specs
- Audit Log
- HMAC-SHA256 hash chain per tenant
- Rollback
- Full write journal, reversible at any point
- SIEM Integration
- WebhookEventBus → your SIEM/SOAR
- Compliance
- Designed to satisfy SOC 2 CC7.2
See FortifyX™ in Action
Book a demo to see blast radius modelling and the approval workflow live.