See the environment.
Prove the controls.
Fix the gaps.
AssurIQ brings endpoint management, infrastructure intelligence, remediation, cybersecurity assurance and evidence into one operational platform for MSPs and internal IT teams.
- 18%62%41% freeBP-FRONT-07Windows 11 Pro · Healthy
- 74%81%12% freeSRF-FI-02Windows 11 Pro · Disk attention
- 9%48%54% freeBP-IMG-03Windows 10 · Update pending
- ———HLA-LAP-14Windows 11 Pro · Offline · 18m
Day-to-day IT operations,
connected to assurance.
AssurIQ connects endpoint operations, infrastructure intelligence and continuous cyber assurance. A missing update or stopped service stays linked to the affected asset, risk, controls, remediation, validation and evidence.
- Endpoint Operations: monitoring, inventory, services, patch posture, approved automation and remote-support workflows.
- Infrastructure Intelligence: discovery, topology, health, configuration and change history.
- Continuous Cyber Assurance: risk, controls, evidence, validated remediation and reporting.
- 01What do we have?Discovery, inventory, live topology
- 02What is exposed or misconfigured?Vulnerability, configuration and identity risk
- 03Which controls does that affect?Universal controls mapped to frameworks
- 04What evidence proves the safeguard?Evidence Vault with provenance and history
- 05What should we fix first?Risk-ranked remediation and validation
- 06Can we show the fix stayed fixed?Continuous assurance and reporting
Manage the endpoint. Understand the infrastructure. Prove the controls.
AssurIQ connects day-to-day IT management with cybersecurity assurance. Monitor and manage endpoints, understand the surrounding infrastructure, remediate risk, validate the result and preserve the proof.
Endpoint Operations
Infrastructure Intelligence
Security & Exposure
Continuous Assurance
Operations & Reporting
Find → Understand → Fix → Validate → Prove → Report
The most important AssurIQ idea: an endpoint signal keeps its operational, infrastructure, security and assurance context from detection through customer reporting.
- 01FindEndpoint alert
- 02UnderstandAsset + exposure
- 03FixApproved job
- 04ValidateFresh observation
- 05ProveEvidence record
- 06ReportCustomer brief
Monitor the endpoint without losing the rest of the environment.
Traditional RMM tells you something is wrong. AssurIQ is designed to connect that signal to the affected infrastructure, security risk, controls, remediation, validation and evidence.
- CPU, memory, disk, uptime and agent-health intake
- Operating-system, hardware, service and software visibility across the pilot roadmap
- Patch posture, authorized automation and alert workflows connected to the same asset record
- 18%62%41% freeBP-FRONT-07Windows 11 Pro · Healthy
- 74%81%12% freeSRF-FI-02Windows 11 Pro · Disk attention
- 9%48%54% freeBP-IMG-03Windows 10 · Update pending
- ———HLA-LAP-14Windows 11 Pro · Offline · 18m
Prove the control once. Map the proof everywhere it applies.
Frameworks ask overlapping questions in different words. AssurIQ evaluates the technical control — MFA on privileged identities, segmentation of IoT traffic, tested backups — and carries that single result into every framework requirement it satisfies.
- Universal AssurIQ controls, not per-framework duplicates.
- Six distinct states — an Evidence Gap is a missing proof, never a silent failure.
- Assurance confidence reflects evidence quality, freshness and source.
| Control | State | Confidence | Latest evidence |
|---|---|---|---|
AIQ-IAM-002 MFA enforced for privileged cloud identities | Fail | 96 | Identity connector · 2h ago |
AIQ-NET-011 Internet-facing services free of known-exploited CVEs | Fail | 98 | Collector scan · 40m ago |
AIQ-END-004 Endpoints run supported operating systems | Partial | 88 | Asset inventory · 1h ago |
AIQ-BCK-001 Backups tested for restore within policy window | Evidence Gap | — | No evidence attached |
AIQ-NET-003 Guest / IoT traffic segmented from corporate VLANs | Pass | 92 | Topology snapshot · 40m ago |
A live, verified map of what you actually run.
The optional AssurIQ Site Probe extends visibility beyond individually managed endpoints. Scoped TCP-connect discovery is available; advanced SNMP, LLDP/CDP and network monitoring continue through staged development.
- Verified and inferred relationships are shown distinctly when their supporting observations are available.
- VLAN, subnet and switch-port workspaces are built around raw observations.
- Snapshots and change narratives preserve what moved, appeared or disappeared.
Fix first what is exploitable, exposed and connected.
A critical CVE on an isolated lab box and the same CVE on an internet-facing firewall are not the same problem. AssurIQ ranks them differently and explains why.
- CVSS is an input, not the answer — EPSS, KEV, exposure, criticality, mitigations and age all count.
- Configuration drift and segmentation mistakes are findings too.
- Every finding shows the controls, frameworks and blast radius it touches.
- CVSS base9.8
- EPSS0.94
- Known exploited (KEV)Yes
- ExposureInternet-facing
- Asset criticalityEdge firewall
- Compensating controlNone
- Age11 days
- 3 controls affected — AIQ-NET-011, AIQ-VUL-001, AIQ-NET-014 move to FAIL
- Frameworks — FTC Safeguards, NIST CSF 2.0, Cyber Insurance Baseline
- Blast radius — every VLAN behind the edge, incl. F&I workstations
- Remediation — firmware update queued · validation rescan on completion
Privileged identities and cloud tenants are part of the environment.
The most common gap in a small business is not a missing firewall. It is an administrator account without MFA. AssurIQ treats identity and cloud configuration as first-class signals.
- Microsoft 365 / Entra ID and Active Directory posture: privileged MFA, stale credentials, legacy protocols.
- Cloud connectors feed the same universal controls as on-premises discovery.
- Identity findings link to the controls and framework requirements they affect.
- svc-backup@brightpathGlobal AdminNo MFA
- j.reyes@brightpathGlobal AdminMFA enforced
- legacy-scanDomain Admin (AD)Password 412d old
- kiosk-frontdeskUserLegacy auth allowed
Evidence you can hand to an auditor — with the history intact.
Compliance is a moment; assurance is a record. The Evidence Vault turns collector observations, connector data and uploaded artifacts into a defensible timeline.
- Every item carries source, collector or connector, timestamp and integrity hash.
- History is append-only. A control that went Partial and back to Pass keeps that story.
- Time-boxed, read-only auditor access scoped to the evidence they need.
- Aug 04Evidence GapNo evidence on fileControl created from HIPAA pack mapping
- Aug 06PartialCollector · endpoint census3 of 41 workstations still on unsupported OS
- Aug 19PartialManual upload · lifecycle planReplacement schedule attached, exception requested
- Aug 27PassCollector · endpoint censusAll endpoints on supported OS · confidence 94
A work queue ranked by connected risk, closed by validation.
Fix Center is where endpoint operations, risk, controls and evidence converge into authorized work for MSP technicians and internal IT teams.
- Detect → Precheck → Approve → Execute → Validate → Document.
- Endpoint execution remains inside the controlled Windows pilot; workflow and evidence stay visible.
- A successful command is not complete until a fresh observation validates the outcome.
- criticalPatch KEV vulnerability on edge firewallSummit Ridge Ford · affects 3 controls
- highEnforce MFA on 2 privileged M365 accountsBrightpath Dental · affects 2 controls
- mediumMove camera cam-lot-03 back to IoT VLANSummit Ridge Ford · affects 1 control
- mediumReplace 3 unsupported Windows endpointsBrightpath Dental · affects 1 control
Reports that say what changed, what is proven, and what is still open.
Different audiences need different truths from the same data. Report Studio produces each from one evidence base, as point-in-time snapshots that can be shared safely.
- Executive briefs with Security Risk, Assurance and Operational Health kept separate.
- Auditor-ready snapshots with evidence attached, not just percentages.
- Operational reports for technicians: collectors, coverage, drift, overdue items.
- Evidence gaps reduced 14 → 6; backup restore proof still open
- Privileged MFA moved PARTIAL → PASS and held for 61 days
- 1 approved exception expires in 41 days
- Collector coverage 97% of known subnets
Built for regulated small and mid-sized organizations — and the MSPs who serve them.
The same platform, tuned with industry packs and framework mappings that match how each sector is actually assessed.
Automotive & dealerships
Healthcare & dental
Professional services
Framework packs, mapped to universal controls.
AssurIQ ships original summaries and high-level mappings for the frameworks that matter to its customers, versioned so mappings can evolve as requirements do.
Qualified individual, risk assessment, access controls, MFA, encryption, monitoring, service-provider oversight, incident response.
Readiness detailsAdministrative, physical and technical safeguards; risk analysis; access and audit controls; contingency planning; business associates.
Readiness detailsVersion-aware readiness support for the practice families, with evidence collection aligned to assessment objectives.
Readiness detailsAssurIQ provides continuous assurance, readiness, evidence, risk and remediation support. It does not certify an organization as compliant, a passing dashboard is not a legal determination, and AssurIQ does not make breach-notification decisions. Framework mappings use original AssurIQ summaries, not reproduced standard text.
One Operations Platform Across Every Customer.
Move from endpoint alert to infrastructure context, remediation, validation and customer-ready evidence without stitching together five unrelated consoles.
- Customer, site, endpoint and network scope in one portfolio
- Windows endpoint operations pilot and patch posture
- Vulnerabilities, alerts and remediation
- Controls, evidence and customer-ready reports
- Tenant isolation and delegated roles
- Prospect assessments and industry packs
- criticalPatch KEV vulnerability on edge firewallSummit Ridge Ford · affects 3 controls
- highEnforce MFA on 2 privileged M365 accountsBrightpath Dental · affects 2 controls
- mediumMove camera cam-lot-03 back to IoT VLANSummit Ridge Ford · affects 1 control
- mediumReplace 3 unsupported Windows endpointsBrightpath Dental · affects 1 control
Point tools leave the hardest questions to a spreadsheet.
Each of these products is good at its one job. The cost shows up in the gaps between them — gaps a customer, insurer or assessor eventually asks about.
| Question | Single-purpose tool | Connected in AssurIQ |
|---|---|---|
| Which exposed asset breaks which control? | Scanner lists CVEs; compliance tool lists controls; nobody joins them. | Findings link to the controls and framework requirements they affect. |
| Is that Evidence Gap a failure? | Checklists show red or green. | Six control states; missing evidence is visibly different from a failed control. |
| Did last quarter's fix hold? | Ticket closed; nothing re-checks. | Validation re-tests the control and reopens on regression. |
| Is this customer risky, unproven, or unhealthy? | One blended score hides the answer. | Security Risk, Assurance and Operational Health reported separately. |
| Can the auditor see proof without seeing everything? | Screenshots in a shared folder. | Scoped, time-limited, read-only access to the Evidence Vault. |
Works with the stack you already run.
AssurIQ is not tied to one firewall, RMM, or identity vendor. The collector observes the network directly; connectors enrich it.
Designed to hold customer environments safely.
Assurance software sees a lot. AssurIQ is built to see as little as necessary and to isolate what it holds.
- Row-level tenant isolation enforced in the database for every record.
- Outbound-only collection over encrypted transport; no inbound customer firewall rules for current collection.
- Data minimization: metadata, configuration and security state — not customer documents or content.
- Credentials for documentation stored encrypted; values decrypted server-side only, every reveal logged.
- Append-only evidence history with integrity hashes.
- Role-based access from platform admin to scoped auditor.
A complete fictional MSP portfolio you can click through today.
Northline MSP manages a dental practice, a dealership group, an advisory firm and a manufacturer — with a live KEV firewall vulnerability, an admin without MFA, a camera that wandered onto the corporate VLAN, and an evidence history that went Partial and back to Pass. Every organization is fictional; every workflow is real.
| Control | State | Confidence | Latest evidence |
|---|---|---|---|
AIQ-IAM-002 MFA enforced for privileged cloud identities | Fail | 96 | Identity connector · 2h ago |
AIQ-NET-011 Internet-facing services free of known-exploited CVEs | Fail | 98 | Collector scan · 40m ago |
AIQ-END-004 Endpoints run supported operating systems | Partial | 88 | Asset inventory · 1h ago |
AIQ-BCK-001 Backups tested for restore within policy window | Evidence Gap | — | No evidence attached |
AIQ-NET-003 Guest / IoT traffic segmented from corporate VLANs | Pass | 92 | Topology snapshot · 40m ago |
Manage the endpoint. Understand the infrastructure. Prove the controls.
Explore the connected platform, or talk with the AssurIQ team about a controlled Windows RMM pilot. No production data is required to explore the fictional sandbox.