Search documentation

…atus This article is a concise reference. A fully expanded guide for “Identity Security” is scheduled in the documentation roadmap; the steps below are accurate for the current pro…

Overview Run the first vulnerability, exposure and identity assessment and read the results correctly. Documentation status This article is a concise reference…

Overview Device → User → Identity provider → Cloud app → Data; conditional access expectations and how untrusted-device sessions are su…

Purpose The Microsoft 365 / Entra ID integration is the primary identity evidence source in AssurIQ. It powers privileged account inventory, MFA coverage, conditional access…

…ation and admin role evidence for organizations using Google as their identity provider, feeding the same identity controls as Microsoft 365. Requirements Google Workspace doma…

…vileged group membership and legacy protocol exposure alongside cloud identity evidence. Requirements A domain-joined Windows host or the AssurIQ collector reachable to a domai…

Overview How AssurIQ assesses business-owned iOS, iPadOS and Android devices: trust states, posture signals, cloud access graph and what each platform can act…

Overview On-prem AD hygiene checks and what evidence they produce. Documentation status This article is a concise reference. A fully expanded guide for “Act…

…ollectors/enroll Exchange a one-time enrollment token for a collector identity and credential POST /api/v1/collectors/heartbeat /api/public/v1/collectors/heartbeat Report liveness,…

…oint vulnerability and detection controls alongside the Microsoft 365 identity connector. Requirements Microsoft Defender for Endpoint Plan 1 or 2 licensing An Entra ID app reg…

Overview A collector uses two separate kinds of trust: its own identity with the AssurIQ control plane (the collector credential issued at enrollment), and any target creden…

…d for the host's form factor. Re-enrollment reuses the same collector identity in AssurIQ and does not create a duplicate record. Escalation If the collector remains offline…

Overview SNMP is the primary source of device identity, interface state, PoE budget and topology hints for switches, firewalls, wireless controllers and acc…

…y a subset of standard MIBs. This produces a device record with basic identity but missing interface counters, PoE data, or vendor-specific detail. This is expected behavior, not…

…rds design (access control) AIQ-AC-001, AIQ-AC-002 Safeguards design (identity) AIQ-ID-001, AIQ-ID-004, AIQ-ID-006, AIQ-ID-007 Testing and monitoring AIQ-VM-001, AIQ-VM-002, AIQ-MO…

…lth and last check-in Detections populate alongside vulnerability and identity findings Spotlight vulnerability data appears per host, where licensed Data collected Host invent…

…late under Attack Surface IAM user and role inventory populates under Identity Security Data collected EC2, S3, RDS and VPC resource inventory Security group and network ACL ru…

…y agent with bearer-token trust toward the fully designed mTLS device-identity model and broader platform coverage. Phase Focus Phase A Outbound-only enrollment and heartbeat, co…

…lass. Idempotency keys make retries harmless. Collected today: host identity, open services from network scan, interfaces/VLANs/neighbors/routes. Not yet collected: services, ins…