Platform Method & Trust Verify Contact Request access
In development · built with MSPs

The security you're already selling,
made provable.

Armada scores every client tenant's Microsoft 365 posture against a weighted control catalog, signs every result so it can be checked later, and hands you a report that carries your brand. The raw telemetry is destroyed before the scan finishes, so there is nothing left to leak.

console.armada-solutions.com
Client fleet · sample data
ClientPostureFindings mixStatus
Cedar Ridge Accounting
Accounting · 17 seats
910 H1 M14 okSecure
Vance Realty
Real estate · 22 seats
741 H3 M8 okNeeds work
Brookline Dental Group
Dental · 31 seats
622 H4 M9 okNeeds work
Harbor Law LLP
Legal · 29 seats
483 H5 M5 okAt risk
Posture attestation
standby
Ephemeral scan · demonstration
identity · mfa registration·····
conditional access policies·····
privileged role assignments·····
raw telemetry in memory 0 bytes
sig awaiting scan
utc ·····
Raw posture data never persists. Only the signed result remains, and anyone can check it.
0
Live signals today
MFA registration · Conditional Access · privileged roles
0
Weighted controls
four of them knock a tenant out on their own
0
Bytes retained per scan
read into memory, scored, released
0
Signed record per scan
hash-chained to the scan before it
The problem

Your security work is invisible
until something breaks.

You already do the work. Hardening tenants, chasing the last four people who never finished MFA enrollment, pulling standing admin rights back down to a sane number. Your client sees none of it. What they see is a line on an invoice they have no way to judge, and at renewal that is the first line anyone questions.

The screenshot era
With Armada
You export a scanner screenshot the night before the QBR, for one client, by hand.
Every client is scored on a schedule. The report is already current when you sit down.
The work lives in your head, and your client has to take your word for it.
A branded assessment in your client's hands. Your logo, their posture, in writing, every month.
A client's posture drifts after onboarding and nobody notices until the incident.
Every result is signed and chained, which is the record drift detection compares. That comparison is designed and not built yet.
Another vendor accumulates your clients' security data, and your liability with it.
Raw data is destroyed inside the scan. There is nothing to breach and nothing to subpoena, across your whole book.
How it works

The proof isn't built the night
before the QBR.

01

Connect your book

Armada runs on the delegated admin relationship you already hold, through three read-only Graph scopes we publish in full before you ever reach a consent screen. Nothing gets installed in your client's tenant. Nothing new gets asked of them. And they can revoke the whole thing from their own portal without coming through you first.

02

Score, watch, report

Every tenant is scored against the same weighted catalog, and the catalog version is stamped onto the result, so a report you handed over in March still means precisely what it said when someone reads it in November. Comparing signed records against each other to surface drift is designed and not yet built.

03

Defend the line item

Your client ends up holding a dated, signed document that shows what their security spend bought them, month over month, in language they can follow without you in the room. When renewal comes, the conversation opens on a record instead of on goodwill.

Coverage
catalog 2026.07.0-graph1

Thirteen controls carry the score.
Two of them are verified today.

Most vendors show you the catalog they intend to have. This is the one that exists, weighted exactly as the scorer weights it. The gold is what the first Microsoft 365 integration reads. Everything dim is a control we refuse to guess at, and it prints as "not verified" on every report until a real source is wired to it.

Verified by the Microsoft 365 integration Printed as "not verified" until a source is wired
2 / 13
Controls verified
20 / 99
Scored weight covered
4
Knockout controls
0
Statuses ever inferred
The platform

Made for your console.
Written for your client's QBR.

Fleet posture

Your whole book on one screen, every tenant scored and ranked by risk.

Remediation simulator

Toggle a fix and watch the score move, so you know which change to sell before you sit down.

White-label reports

Your logo, your colors, your domain. Your clients never see us at all.

Drift detection

Designed, not built yet. The signed records the comparison needs are produced on every scan today.

The method

We read it, we score it,
and then it's gone.

Every scan is single-use. There is no database of your clients' security data anywhere in Armada, because the architecture has nowhere to put one.

i.

Collect

Posture is read straight from Microsoft Graph into process memory, over the delegated access you already hold. Three scopes, every one of them read-only. The application has no write capability at all, so it could not alter a tenant even if it were told to.

ii.

Evaluate

Thirteen weighted controls, scored only across what the scan could actually verify. Four of them are knockouts that cap a tenant's grade on their own. A control the scan couldn't reach is a coverage gap, never a failure, and never a guess.

iii.

Destroy

The buffer is overwritten and released the moment scoring finishes. There is no table, field, or backup anywhere in the system that could hold raw telemetry, so nothing survives the scan by accident either.

iv.

Attest

One signed record survives: the score, each control status, the catalog version, and an ECDSA P-256 signature over a hash chained to every scan before it. Rewriting the history would break the chain, and that break is visible to anyone, not only to us. The public key is published and the checker runs in your browser, so your client's auditor can confirm a record without coming through you or through us. Check one now.

Get started

Be at the front of the line.

We're working with a small group of MSPs ahead of wider release. Tell us who you are. A founder reads every note.

Request early access