Identity, email, and device security for SMBs and MSPs

Find the security gaps before attackers do

Attackers exploit weak identities, misconfigured email, and unprotected devices. PosturIQ checks all three so you can find and close the gaps first.

Start 30-day free trial See how it works

PosturIQ dashboard showing security scores and findings

A story that plays out every day

One phishing email. Two paths to disaster. PosturIQ checks the settings that let these attacks succeed.

📧Phishing email arrives

Account takeover

🔓Account compromised

📨Inbox access

🎯Contacts phished in your name

💸Invoice fraud

Device compromise

💻Device infected

🦠Data & passwords stolen

🔒Ransomware

🛡️PosturIQ finds the gaps before attackers do

Complete security posture across identity, email, and devices

PosturIQ checks the identity, email, and device configurations attackers rely on, then explains what to fix and why it matters.

☁️

Identity and Microsoft 365

Automated checks via Microsoft Graph API - no agent needed.

✓ MFA enforcement & registration gaps
✓ Legacy authentication blocked
✓ Global admin count & hygiene
✓ OAuth consent & risky third-party apps
✓ Inactive licensed users
✓ Guest access & external sharing
✓ Device code flow blocked
✓ Audit logging enabled

💻

Device security

Windows & macOS configuration checks. Read-only scripts, no MDM needed.

✓ Malware protection status
✓ OS patching & auto-update
✓ Disk encryption
✓ Firewall enabled
✓ Remote access disabled
✓ Screen lock timeout
✓ Software updates
✓ Local admin accounts

📧

Email security

Automated checks via Exchange Online - EOP & Defender for Office 365.

✓ Impersonation protection (CEO fraud)
✓ Safe Links & Safe Attachments
✓ External forwarding blocked
✓ Spam filter bypass rules
✓ DKIM signing & DMARC enforcement
✓ Anti-spam & anti-malware alignment
✓ Preset security policy active

Posture management, not just a report

Accept known risks - without losing sight of them

Every scanner tells you what is wrong. PosturIQ lets you decide what to do about it. Mark an intentional exception - a break-glass admin, an approved guest - as an accepted risk. Your score reflects reality, the decision stays on record, and we re-check it on every scan.

✅

Decide, don't just get alerted

Accept a finding you know is intentional - per item, not the whole check. The score is restored for what you have signed off, so the dashboard shows your real risk instead of noise.

🧾

Keep it accountable

Every accepted risk is recorded and auditable - what was accepted, and when. Perfect for reviews, client sign-off, and proving a decision was deliberate rather than missed.

🔄

Re-verified every scan

If the exception drifts - a new account slips into the gap - the finding automatically re-fails and surfaces only the new risk. Accepted does not mean forgotten.

The same management layer tracks posture over time and flags devices that stopped reporting, so your view stays accurate as your environment changes.

How it works

Start free trial

Connect Microsoft 365

Grant read-only access via OAuth admin consent. We never modify your settings.

Get your security score

Checks run automatically. See your score, findings, and remediation steps in seconds.

For MSPs

All your clients, one dashboard

Multi-tenant dashboard with aggregate scores, per-client drill-in, weekly digest emails, and PDF reports. Onboard clients in minutes with admin consent - no client interaction needed.