AssurIQ
About AssurIQ

Day-to-day IT operations, connected to the proof that safeguards work.

AssurIQ is an Endpoint Operations, Infrastructure Intelligence & Continuous Cyber Assurance platform developed by SFGOC Labs. It connects monitoring and management to risk, controls, remediation, validation and evidence.

Monitor. Manage. Secure. Assure. — See the environment. Prove the controls. Fix the gaps.
Customer overview · Harborline AdvisorsThree scores, kept separate on purpose
71
Security Risk
Exposure × exploitability × criticality
62
Assurance
Controls proven with evidence
88
Operational Health
Availability, collectors, backups
A quiet network can still be unproven. A well-documented one can still be exposed. AssurIQ never blends these into one number.
Mission

Connect the questions that point tools leave unanswered.

What do we have? What is exposed? Which controls does that affect? What proves the safeguard? What do we fix first? Did it stay fixed? AssurIQ is designed so those six questions share one data model and one evidence record.

  1. 01
    Discover

    Collectors and connectors inventory assets, identities, topology and cloud state.

  2. 02
    Assess

    Vulnerabilities, misconfigurations and exposure are scored as AssurIQ Risk.

  3. 03
    Prove

    Each universal control is evaluated against evidence and given a confidence.

  4. 04
    Remediate

    Fix work is ranked by connected risk and validated after completion.

  5. 05
    Assure

    Controls are re-checked continuously and reported with history.

Principles

The product rules we do not bend.

Evidence-first, not framework-first

Evaluate the real control once, with real evidence, and map the proof into every framework it satisfies.

Missing evidence is not failure

Six control states. Evidence Gap is visibly different from Fail — because it is.

Three scores, never one

Security Risk, Assurance and Operational Health answer different questions and are reported separately.

Store observations, derive the graph

Topology and inventory come from raw collector observations. Verified and inferred links are labelled; nothing is invented.

History is append-only

New discovery updates the current state and preserves the previous one. Change is shown, not hidden.

Readiness, not certification

AssurIQ helps you prove and improve safeguards. It does not certify compliance or make legal determinations.

Security & trust

Designed to hold customer environments safely.

Assurance software sees a lot. AssurIQ is built to see as little as necessary, isolate what it holds and leave an audit trail behind every sensitive action.

Tenant isolation in the database

Platform → Partner → Customer → Site → Asset. Every record is protected by row-level security; roles are stored separately from profiles and checked server-side.

Outbound-only collection

Collectors connect outbound over encrypted transport. Enrollment is scoped and observations remain bound to the correct environment. No inbound customer firewall rule is required for current collection.

Data minimization

Configuration state, metadata and proof of safeguards — not customer documents, patient records or deal files.

Evidence integrity

Artifacts hashed at intake; history append-only; reports reference the hash so nothing can change quietly after the fact.

Scoped, expiring access

Auditor and assessor access is read-only, scoped to a customer and framework, time-limited and logged.

Encrypted secrets, server-side reveal

Where documentation credentials must be stored, values are encrypted, decrypted only on the server on an authorized request, and every reveal is logged.

Security details above describe how AssurIQ is designed and built. Formal third-party attestations for AssurIQ itself will be published when complete; we do not claim certifications we have not earned.

Company

Developed by SFGOC Labs.

SFGOC Labs builds AssurIQ and is responsible for its roadmap, security and support. AssurIQ stands on its own as a product; SFGOC Labs appears as its publisher.

  • Product: AssurIQ — Infrastructure Intelligence & Continuous Assurance
  • Category: Endpoint Operations + Infrastructure Intelligence + Continuous Cyber Assurance
  • Publisher: SFGOC Labs
  • Windows RMM: pilot / early access; Linux and macOS planned
Request a demo
Guided walkthrough or self-service sandbox
Talk to Sales
Consultative pricing and pilots
Contact
Questions, partnerships, trust
Product documentation
Help center, playbooks, release notes
© 2026 SFGOC Labs. AssurIQ is a product of SFGOC Labs. All demo organizations are fictional. AssurIQ does not certify legal or regulatory compliance.
Next step

Manage the endpoint. Understand the infrastructure. Prove the controls.

Explore the connected platform, or talk with the AssurIQ team about a controlled Windows RMM pilot. No production data is required to explore the fictional sandbox.

See the PlatformRequest an RMM Pilot