Read-only by design
Azure permissions are limited to posture collection. No passwords, client secrets, tokens, or certificates belong in browser code.
Security & privacy
Access stays limited, visible, and customer-controlled.
The platform is designed around read-only assessment, least privilege, encryption, auditability, and explicit revocation.
Explicit customer control
An authorized Entra administrator grants access and can revoke the enterprise application and Azure roles at any time.
Tenant isolation
Every customer data query is scoped from authenticated organization membership and authorized again on the server.
Encryption and retention
Transport encryption is required. The runner certificate and signing secret remain outside browser code.
Auditability
Authentication, connection, scan, report, and administrative activity produces organization-scoped audit events.
Evidence integrity
The portal displays only evidence returned by completed assessments. Missing controls are never inferred as passing.