A short, free look at one problem, with findings ranked by what to fix first
Start with the thing that's bugging you most. One of our engineers spends a short discovery with your team, looks at the actual setup, and hands back a ranked list of findings. Fix them with us or without us. Your call.
At a glance
Identity assessment
We follow a joiner, a mover and a leaver from HR into your identity platform and apps to see what actually happens. Then we look at where privileged access sits and how much of your estate SSO and MFA really cover.
Upgrade readiness
We measure the gap between your platform and a supported or target version. Then we go looking for the custom code and integrations that'll bite you mid-upgrade. And we sketch what a rehearsal and a rollback would take.
Data access review
Who can reach which data in Snowflake, Databricks or your CRM, and whether roles still match the jobs people do. Plus the service accounts or shared logins that hold broad access.
What it covers
Each assessment covers one of three areas, and only one. That’s deliberate. Spread it wider and the work gets long and the findings get vague.
Identity. We follow people through their lifecycle, from the HR source into your IGA or provisioning platform and out through the connectors to key applications. Leavers get a close look. We also check privileged accounts, how far SSO and MFA reach, and non-human identities like service accounts, API keys and AI agents.
Platform-upgrade readiness. Some platforms have slipped behind. Others have a major release bearing down on them, whether that’s an IdentityIQ major version, a CyberArk move to SaaS, or a change to the Dynamics 365 or Salesforce release cycle. We check the current version and the customizations, integrations and environments around it, and lay out what the upgrade would take.
Data access review. We go through Snowflake, Databricks or a CRM and look at how roles and grants are structured, how they map to real job functions, and where access has drifted.
The format
- Discovery call. Short. We settle the area and what’s in scope, and work out who from your team needs to be on it.
- Working sessions. One or two, usually on a screen share. Your team drives. We ask questions and look at the configuration with you.
- Findings review. We walk you through the findings and answer whatever comes up.
We’re fine signing an NDA before discovery if you want one. How we handle any access or data you share is on our trust page.
What you get
- A ranked list of findings. For each finding we write down what we saw and why it matters, with an urgency rating. Risk and effort decide the order, so start at the top.
- Suggested next steps for the top findings, specific enough that your team could pick one up and act on it.
- Open questions we couldn’t answer in the time we had. We’d rather show you those than pretend to be sure.
The findings are yours to keep and use however you like.
Who it is for
It’s a good fit if you know something’s off and haven’t had time to pin it down. An upgrade that keeps slipping, say. Or an audit finding about access reviews, or a data platform where nobody’s quite sure who can see what.
How to request one
Contact us and give us the short version. Say which area you want looked at and which platforms are involved. A line on what prompted it helps too. We’ll write back to book the discovery call.
01Is it really free?
Yes. You won't get an invoice for it, and you're not obliged to buy anything after. We keep it short and scoped so that stays true.
02Do you need access to our systems?
Not always. A lot of findings come from your team walking us through things over a screen share. If read-only access would help, we'll ask for the narrowest role that does the job and follow our trust practices.
03What happens after the assessment?
You keep the findings, full stop. If you'd like help with any of them, we can scope that as separate work. Fixing them in-house is fine with us too.
Tell us what you're running. We'll tell you what we'd do first.
A 30-minute working session with a senior engineer. No slides.
- The platform and the version you're on
- Where you need to get to, and by when
- What's custom: rules, plugins, integrations
- Any audit finding or deadline driving it