A security baseline your clients and your insurer will recognize — without a security team.
Firms hold other people's sensitive data and are asked to prove they protect it: by clients' vendor-risk teams, by cyber-insurance underwriters and increasingly by regulators. AssurIQ gives a firm — or the MSP that serves it — a flexible baseline, the evidence behind it, and the ability to grow into stricter frameworks when a client requires one.
The pressures are specific. So is the platform.
Every new engagement seems to arrive with a spreadsheet of controls questions. Answers need to be true and repeatable.
Underwriters expect MFA everywhere, EDR, tested backups, privileged-access control and email security — and evidence.
An office manager, an MSP, or one IT generalist. No one has time to reconcile five tools.
A financial-services or defense client can suddenly require NIST-aligned or CMMC-style controls.
Capabilities that map to your obligations.
AssurIQ Security Baseline
Cyber-insurance readiness
Client trust & questionnaires
Asset & risk visibility
Evidence with history
Remediation that closes the loop
Scalable controls
Partner-level reporting
Start with the controls that matter everywhere.
The AssurIQ Security Baseline covers the safeguards almost every client and insurer asks about. Each control shows its state, confidence and evidence — so the firm knows what is proven, what is partial and what is simply unproven yet.
- Six control states including Evidence Gap and Exception
- Confidence from evidence source and freshness
- One control, mapped into every framework you later adopt
| Control | State | Confidence | Latest evidence |
|---|---|---|---|
AIQ-IAM-002 MFA enforced for privileged cloud identities | Fail | 96 | Identity connector · 2h ago |
AIQ-NET-011 Internet-facing services free of known-exploited CVEs | Fail | 98 | Collector scan · 40m ago |
AIQ-END-004 Endpoints run supported operating systems | Partial | 88 | Asset inventory · 1h ago |
AIQ-BCK-001 Backups tested for restore within policy window | Evidence Gap | — | No evidence attached |
AIQ-NET-003 Guest / IoT traffic segmented from corporate VLANs | Pass | 92 | Topology snapshot · 40m ago |
Answer the underwriter with evidence, not optimism.
MFA coverage, EDR deployment, backup testing, privileged access and email security are tracked as controls. The renewal report is a snapshot with evidence attached.
- Insurance baseline pack with live states
- Point-in-time snapshot for the application
- Gaps become a prioritized remediation list
- Evidence gaps reduced 14 → 6; backup restore proof still open
- Privileged MFA moved PARTIAL → PASS and held for 61 days
- 1 approved exception expires in 41 days
- Collector coverage 97% of known subnets
One queue for the firm's IT provider.
Whether the firm has an MSP or an internal generalist, Remediation Center gives them one ranked list with context, playbooks and validation.
- Priority from connected risk
- Ticketing and RMM integration
- Regressions reopen automatically
- criticalPatch KEV vulnerability on edge firewallSummit Ridge Ford · affects 3 controls
- highEnforce MFA on 2 privileged M365 accountsBrightpath Dental · affects 2 controls
- mediumMove camera cam-lot-03 back to IoT VLANSummit Ridge Ford · affects 1 control
- mediumReplace 3 unsupported Windows endpointsBrightpath Dental · affects 1 control
Harborline Advisors (fictional)
A professional-services firm managed by the fictional Northline MSP, with two offices, cloud email and a cyber-insurance renewal coming up.
- Insurance baseline readiness with two open evidence gaps
- Newly discovered unknown device in the second office
- Client questionnaire answered from live control states
- Executive brief for the managing partners
Common questions
We are small. Is this too much platform?+
Will this satisfy our insurer?+
What if a client requires CMMC or NIST 800-171?+
AssurIQ provides continuous assurance, readiness, evidence, risk and remediation support. It does not certify an organization as compliant, a passing dashboard is not a legal determination, and AssurIQ does not make breach-notification decisions. Framework mappings use original AssurIQ summaries, not reproduced standard text.
Manage the endpoint. Understand the infrastructure. Prove the controls.
Explore the connected platform, or talk with the AssurIQ team about a controlled Windows RMM pilot. No production data is required to explore the fictional sandbox.