AssurIQ
Platform overview

Endpoint Operations + Infrastructure Intelligence + Continuous Cyber Assurance.

AssurIQ connects day-to-day IT management to a simple chain: endpoint → asset → finding → control → remediation → validation → evidence → report. Every tenant sees only its own scope.

Explore Endpoint OperationsRequest an RMM Pilot
Endpoint Operations · Windows pilotPilot
EndpointCPUMemoryDisk
  • BP-FRONT-07
    Windows 11 Pro · Healthy
    18%62%41% free
  • SRF-FI-02
    Windows 11 Pro · Disk attention
    74%81%12% free
  • BP-IMG-03
    Windows 10 · Update pending
    9%48%54% free
  • HLA-LAP-14
    Windows 11 Pro · Offline · 18m
    ———
Health signals: CPU · memory · disk · uptimeIllustrative pilot data
The chain

Operational work becomes security context and defensible proof.

Endpoint Operations shows what is happening. Infrastructure Intelligence explains what surrounds it. Continuous Assurance shows which safeguards are affected and whether the result was proven.

Connected operations · one traceable storyFIND → REPORT
  1. 01
    Find
    Endpoint alert
  2. 02
    Understand
    Asset + exposure
  3. 03
    Fix
    Approved job
  4. 04
    Validate
    Fresh observation
  5. 05
    Prove
    Evidence record
  6. 06
    Report
    Customer brief
A stopped service or missing update keeps its asset, risk, control, remediation and evidence context.
What do we have?
Discovery, inventory, live topology
What is exposed or misconfigured?
Vulnerability, configuration and identity risk
Which controls does that affect?
Universal controls mapped to frameworks
What evidence proves the safeguard?
Evidence Vault with provenance and history
What should we fix first?
Risk-ranked remediation and validation
Can we show the fix stayed fixed?
Continuous assurance and reporting
Capabilities

What is in the platform today.

Grounded in the AssurIQ product blueprint. Items marked as roadmap are labelled that way inside the product too.

RMM & Endpoint Operations · pilot

Windows-first health monitoring, inventory, operational posture, approved automation and remote-support workflow architecture connected to the wider environment.
Learn more

Patch & software operations · pilot

Windows Update posture, software inventory, approval policies, maintenance windows, reboot awareness and validation are advancing through the Windows pilot.
Learn more

Discovery & asset inventory

Scoped observations reconcile discovered hosts into a shared asset inventory. Endpoint software and service collection are part of the Windows pilot, not broad release.
Learn more

Topology & network intelligence

Raw infrastructure observations support L1/L2/L3 views, VLANs, ports, paths and blast radius. Advanced SNMP and LLDP/CDP collection remains staged.
Learn more

Device health & configuration history

Endpoint heartbeat intake and infrastructure observations establish operational state. Rich service, software and configuration history is expanding through pilot collection.

Vulnerability intelligence & risk

Findings scored as AssurIQ Risk using severity, EPSS, known exploitation, exposure, asset criticality, mitigations and age — with the controls and frameworks each finding affects.
Learn more

External attack surface

Internet-facing services, certificates and exposed management interfaces tracked against the same assets that appear on the internal map.

Identity & Active Directory posture

Privileged accounts without MFA, stale credentials, legacy authentication and risky group membership across Microsoft 365 / Entra ID and on-premises AD.

Compliance Home, frameworks & controls

Universal controls with six distinct states and an assurance confidence, mapped into framework packs. Framework and control detail views show exactly which evidence supports each result.
Learn more

Evidence Vault & timeline

Provenance-tagged evidence from collectors, connectors and manual uploads, with append-only history, integrity hashes and a per-control timeline.
Learn more

Assurance confidence & evidence quality

Each control result carries a confidence derived from evidence source, freshness, coverage and corroboration — so a stale screenshot never scores like a live collector check.
Learn more

Risk Register

Business-level risks linked to the findings, controls and assets that drive them, with owners, treatment decisions and review dates.

Remediation Center & validation

A single queue ranked by connected risk, integrated with ticketing and RMM, and closed only when validation confirms the control is back in state.
Learn more

Policies, vendors & service providers

Policy acknowledgement and review cycles, vendor and service-provider assessments, contracts and due-diligence evidence — the administrative half of most frameworks.

Incident workflows

Structured incident records with timeline, containment steps and post-incident review — without making legal notification determinations for you.

Alerts & operational health

Portfolio alert views cover customer, site and asset context. Automated endpoint rule evaluation, delivery and stale-agent sweeps are in development.

Reporting & auditor access

Report Studio for executive, operational and assessor audiences; point-in-time snapshots; scoped, time-limited read-only auditor logins.

Agents, Site Probe & integrations

Secure outbound collection underpins the Windows pilot. Linux and macOS agents, broad remote-support integrations and expanded Site Probe modules are planned.

Automation & AssurIQ Analyst

Deterministic network analyst queries today (what changed, where is this device, what depends on this switch); grounded, evidence-cited assistant capabilities on the roadmap.
Three scores, never one

Security Risk, Assurance and Operational Health are reported separately.

Blending these into one number makes a quiet, undocumented network look fine and a well-documented, exposed one look bad. Executives, technicians and assessors each need the right score for their decision.

  • Security Risk — how exposed and exploitable the environment is right now.
  • Assurance — how much of the required control set is proven with current evidence.
  • Operational Health — availability, collector coverage, backups and drift.
Customer overview · Harborline AdvisorsThree scores, kept separate on purpose
71
Security Risk
Exposure × exploitability × criticality
62
Assurance
Controls proven with evidence
88
Operational Health
Availability, collectors, backups
A quiet network can still be unproven. A well-documented one can still be exposed. AssurIQ never blends these into one number.
Control model

Six control states, because reality has more than two.

PASS, PARTIAL, FAIL, EVIDENCE GAP, NOT APPLICABLE and EXCEPTION. The distinction matters most for Evidence Gap: the safeguard may well be in place — AssurIQ simply cannot prove it yet, and says so instead of painting it red.

How assurance confidence works
Compliance · Universal controls · Brightpath Dental7 controls · 3 frameworks mapped
ControlState
AIQ-IAM-002
MFA enforced for privileged cloud identities
Fail
AIQ-NET-011
Internet-facing services free of known-exploited CVEs
Fail
AIQ-END-004
Endpoints run supported operating systems
Partial
AIQ-BCK-001
Backups tested for restore within policy window
Evidence Gap
AIQ-NET-003
Guest / IoT traffic segmented from corporate VLANs
Pass
AIQ-VND-002
Service providers assessed on schedule
Exception
AIQ-PCI-007
Cardholder data environment scoped
N/A
StatesPassPartialFailEvidence GapN/AExceptionEvidence Gap means proof is missing — it is not a failure.
Tenancy

Platform → Partner → Customer → Site → Network → Asset.

The hierarchy is enforced with row-level security in the database. Partners see their portfolio, customers see themselves, auditors see a scoped, time-boxed slice. Direct organizations without an MSP run on the same model.

  • Platform Super Admin · Partner Owner · Partner Technician · Partner Compliance Analyst
  • Client Administrator · Client Executive
  • Auditor / Assessor — read-only, scoped, time-limited
AssurIQ for MSPs
Live Map · Summit Ridge Ford · L2 switchingVerified (LLDP/CDP)Inferred (FDB)
Internet
fw-edge-01
sw-core-01
sw-access-01
sw-access-02
srv-dc-01
ws-svc-14
ap-showroom
cam-lot-03
ws-fin-02KEV · CVE on WAN interfaceAffects 3 controls · exposure: internetRisk 94 · Fix first
Architecture

Windows-first endpoint operations with an optional Site Probe.

Secure outbound collection connects endpoint and site observations to the AssurIQ control plane. Windows is in pilot; Linux and macOS agents are planned.

AssurIQ Site Probe

Optional scoped TCP-connect discovery extends visibility beyond managed endpoints. Advanced SNMP, LLDP/CDP, syslog and configuration modules remain staged.

Operational integrations

Approved remote-support, PSA, identity, cloud, backup and documentation connectors are designed to enrich the same asset graph; availability varies by integration.

Controlled operations

Endpoint actions are designed around authorization, audit history and validation. General execution remains inside the Windows pilot roadmap.

Windows Endpoint Operations is pilot / early access. No downloadable agent is described as released until a signed build is published and validated.

AssurIQ provides continuous assurance, readiness, evidence, risk and remediation support. It does not certify an organization as compliant, a passing dashboard is not a legal determination, and AssurIQ does not make breach-notification decisions. Framework mappings use original AssurIQ summaries, not reproduced standard text.

Keep exploring

Network Intelligence

Discovery, topology, ports, changes
Learn more

Continuous Assurance

Controls, confidence and history
Learn more

Vulnerability & Risk

Prioritization beyond CVSS
Learn more

For MSPs

Portfolio, roles and tenancy
Learn more
Next step

Manage the endpoint. Understand the infrastructure. Prove the controls.

Explore the connected platform, or talk with the AssurIQ team about a controlled Windows RMM pilot. No production data is required to explore the fictional sandbox.

See the PlatformRequest an RMM Pilot