Research
What we are finding.
Anonymised hygiene benchmarks, practical audit-prep guides, and teardowns of what identity tooling structurally cannot see. Written for the person who has to run the review, not for the person who signs the invoice.
Nothing published yet.
The first pieces are being written — an IdP teardown, an audit-prep guide, and a benchmark drawn from anonymised findings. We would rather publish three things worth your time than twelve things worth ours.
Leave an address and we will send the first one when it lands.
Benchmarks
What identity hygiene actually looks like across mid-market estates, drawn from anonymised findings. Thin at first and better every quarter.
Audit prep
Practical guides for the weeks before an audit. What evidence holds up, what gets questioned, and what to fix first.
Teardowns
What an identity provider structurally cannot see, where access reviews fail, and why the failure is architectural rather than careless.
Find out what is in your amber.
Register for early access. Connect one system read-only, and see your first findings within the hour — the accounts nobody owns, the privilege nobody granted, the access that was never actually removed.
Scorpion — the service account. Ancient, over-privileged, still venomous. Real scorpions turn up in real amber, which makes this the most literally accurate specimen in the set.