One product, named
Warden. Read-only Entra ID assessment, evidence attached, report written. Nothing here is a placeholder for a roadmap item, and where something is not finished the product page says so.
Products
One product, and the judgement behind it.
We would rather build one tool properly than five adequately. Warden is the thing we use on every engagement, and the reason our reports look the same whichever tenant they describe.
What we sell, plainly
Delivered by tool and human
Warden does the reading; we do the interpretation. You get the register, the report and a person who can explain why a finding is rated the way it is when someone in your team pushes back.
The same engine you could buy
We are not selling you a subscription to a scanner with our logo on it. Warden is our working tool, and what it produces is what we would put in front of a regulator.
Warden Tenant assurance
Available now
Read-only Entra ID tenant assurance.
Warden signs in to a tenant with five read permissions, caches thirty datasets, runs the checks, rates each result on impact against likelihood, and writes a report that includes what it could not read. Short answer up front; the full workings always behind it.
- Check library
- 28 finding types catalogued; D4 MFA-exemption analysis built end to end and used on live engagements.
- Deployment
- Runs from our infrastructure, against a lab tenant of yours, or on a machine you keep.
- Output
- Findings register, client questions, manual evidence tasks, HTML report with dated evidence.
- Credentials
- Client secret, certificate, or delegated Global Reader. Revocable by you in one click.
Not a product, but offered
Bespoke identity work.
Some questions need a person for an afternoon rather than an assessment. We do those too, and they are often the better-value version of the engagement you were about to buy.
Second opinion on a design
Your team has drawn a Conditional Access design and wants a read-through before it goes live. Bring the policies and we will tell you what they actually permit, which is not always what the diagram meant.
One hard question
"Could a standard user reach our finance share?" "Did anyone ever consent to an app that reads all mailboxes?" One question, an answer with evidence attached, and a clear statement of what we could not determine.
Remediation support
You have a register and need help working out the order. We will rank it against your actual risk, tell you which items are theatre, and stay quiet about the rest.
Pre-audit tidy
Six weeks before an ISO or SOC 2 audit, with the assessor's expectations in hand. Not the audit, and we will not pretend to be your certification body.
What we turn down
Managed detection and 24/7 SOC cover, incident response retainers,
penetration testing, Cyber Essentials or ISO certification, endpoint and
email security products, and anything that needs us to hold admin rights
in your tenant permanently. We are two people who go deep on identity,
and we would rather refer you than do a poor job.
Sound close but not exact?
Ask us the awkward question