Guided product snapshot
Follow one exposure from evidence to verified recheck.
This walkthrough uses a fictional organisation and a synthetic, locally controlled dataset. It demonstrates the product workflow; it is not a live scan, a customer account, a free trial or a paid entitlement.
Sample exposure EX-1047
A decision record, not an unexplained score.
Open each stage to inspect what the customer can verify and act on.
1EvidenceObserved
Public certificate evidence and an authorised cloud export identify the same internet-facing service.
The source, collection time, boundary and evidence hash remain attached.
2PriorityDecision
The service is externally reachable, business-critical and connected to a production identity path.
Priority is explained by evidence confidence, reachability, business impact and relationship context.
3OwnerAccountability
Cloud Platform Operations owns the affected service. Identity Engineering is a required collaborator.
Ownership is explicit so the finding does not stop at a technical report.
4RemediationAction
Restrict the public route, rotate the scoped credential and confirm the intended identity boundary.
The recommendation is reviewed in the customer environment before any operational change.
5RecheckClosure
The authorised recheck records the route as restricted and retains residual-risk context.
Closure requires new evidence; changing a workflow state alone does not prove remediation.
- Asset
- Production supplier portal
- Confidence
- High, based on corroborated sources
- Business impact
- Supplier operations and production scheduling
- Residual risk
- Monitored identity dependency remains
