Search documentation

…atus This article is a concise reference. A fully expanded guide for “RBAC” is scheduled in the documentation roadmap; the steps below are accurate for the current product version.…

Purpose The Defender for Endpoint connector pulls device risk score, vulnerability, EDR alert and onboarding status via the Microsoft Graph Security API, feed…

Purpose The Microsoft 365 / Entra ID integration is the primary identity evidence source in AssurIQ. It powers privileged account inventory, MFA coverage, con…

Overview Device → User → Identity provider → Cloud app → Data; conditional access expectations and how untrusted-device sessions are surfaced. Documentation…

Overview Scoped, read-only, time-limited access for assessors. Documentation status This article is a concise reference. A fully expanded guide for “Auditor…

Overview Inviting users and assigning platform, partner, client and auditor roles. Documentation status This article is a concise reference. A fully expande…

Overview Client administrator and executive portals. Documentation status This article is a concise reference. A fully expanded guide for “Customer Access”…

Purpose The Google Workspace connector collects user, group, 2-Step Verification and admin role evidence for organizations using Google as their identity prov…

Purpose The CrowdStrike Falcon connector uses the Falcon OAuth2 API with read-only scopes to collect host sensor health, detection and vulnerability exposure…

Purpose RMM connectors reconcile the device inventory, patch status and monitoring alerts already managed by your RMM platform against AssurIQ's asset and vul…

Purpose The Azure connector uses a read-only service principal to inventory subscriptions, resource groups, virtual machines, network security groups and publ…

Raw observations to derived graph Collectors upload raw, timestamped observation records — interfaces, VLANs, IP addresses, routes, LLDP/CDP neighbors, forwar…

Overview ARP, ICMP, SNMP, LLDP/CDP and DHCP seeding; scopes and schedules. Documentation status This article is a concise reference. A fully expanded guide…

Overview How AssurIQ assesses business-owned iOS, iPadOS and Android devices: trust states, posture signals, cloud access graph and what each platform can act…

Overview Authenticated and unauthenticated scans, scopes, schedules and safe defaults. Documentation status This article is a concise reference. A fully exp…

Purpose The FortiGate connector combines a read-only REST API administrator profile with SNMPv3 polling to collect firewall policy, VPN, firmware and interfac…

Purpose PSA connectors synchronize AssurIQ findings and remediation items into your ticketing system as tickets, and read back ticket status so remediation SL…

Overview The v0.1 collector talks to three POST, JSON, snake_case endpoints under /api/v1/collectors. On deployments where the main site is access-restricted,…

Purpose On-prem Active Directory integration reads domain user, group and Group Policy state through a lightweight collector-side query so AssurIQ can assess…

Purpose The UniFi connector reads controller (UniFi Network Application or UniFi OS Console) inventory, client, VLAN and firmware state so AssurIQ can assess…

Purpose This integration collects running configuration, interface, VLAN and CDP neighbor data from Cisco IOS and IOS-XE switches and routers using SNMPv3 for…

Purpose The Meraki connector uses the Meraki Dashboard API to collect organization, network, device, client and security appliance event data across MX, MS an…

Purpose The SonicWall connector reads firmware, security service and firewall rule state from SonicOS appliances to assess management exposure and patch curre…

Purpose This integration uses the PAN-OS XML/REST API with a read-only administrator role to collect firewall policy, threat prevention, App-ID and firmware e…

Purpose The Aruba integration polls Aruba switches, controllers and Aruba Central-managed access points to collect VLAN, wireless client and configuration evi…

Purpose The pfSense integration collects firewall rule, interface and package state from pfSense/pfSense Plus appliances using the pfSense REST API package or…

Purpose The SentinelOne connector reads agent health, threat and application inventory data through the SentinelOne Management Console API using a read-only s…

Purpose The AWS connector assumes a read-only cross-account IAM role to inventory EC2 instances, security groups, IAM configuration and public exposure across…

Overview A collector uses two separate kinds of trust: its own identity with the AssurIQ control plane (the collector credential issued at enrollment), and an…

Overview The native collector is at v0.1. This article is the single source of truth for what it actually does today, so other collector articles that describ…