An identity health check, with a readout.
A one-off check of your Microsoft Entra ID tenant and, if you have them, your SailPoint, Saviynt or CyberArk exports. You get the findings, explained in plain English, and a meeting to go through them.
What we check
- People who left but still have access in Entra ID, your apps or your privileged accounts
- Admin rights, including the hidden ones: apps with admin roles, owners of admin groups and privileged apps
- AI agents: sponsor, owner, credentials and access for each one
- Groups, apps and guests nobody answers for any more
- Apps with access to people's data, including AI tools users approved themselves
- Whether your systems agree with each other
- Microsoft 365 security settings, using the open-source Maester checks
What you get
- The digest and the full findings report, for your team only
- A 90-minute readout with Agentscopic: what matters most, who should act, what can wait
- A list of what was not checked and why
How it runs
- 1
A short call to agree the scope.
- 2
Your administrator approves the read-only app (we send click-by-click steps).
- 3
Optional: you export from SailPoint, Saviynt or CyberArk; the file is encrypted before it leaves your server.
- 4
We run the checks and send the results within 5 working days.
- 5
The readout.
Price
Price on request.
Afterwards you can continue with daily monitoring, or remove the app. Nothing stays in your tenant.