Platform Method & Trust Contact Request access
The platform

Built for your console — and your client's QBR.

Three views from the MSP console — the fleet, the simulator, and the record. Everything below runs on sample data, marked as such, because we don't fake traction and we don't fake posture.

ARMADA
Sample data
ClientPostureFindings mixStatus
Cedar Ridge Accounting
Accounting · 17 seats
910 H1 M14 okSecure
Vance Realty
Real estate · 22 seats
741 H3 M8 okNeeds work
Brookline Dental Group
Dental · 31 seats
622 H4 M9 okNeeds work
Harbor Law LLP
Legal · 29 seats
483 H5 M5 okAt risk
Every client tenant carries its verified posture score, findings mix, and status — so the QBR starts from evidence instead of a screenshot.
ARMADA
Illustrative model
Enforce MFA on every admin
The single heaviest control on the catalog
Block legacy authentication
It bypasses MFA entirely — top attack vector
Reduce Global Admins to four
Standing privilege is standing risk
48
Posture score
At risk
Closes 0 of 3 critical gaps
Toggle a fix, watch the score and status move — that's the QBR, rehearsed. Walk in knowing exactly which change buys the client the most ground. The live product runs the full 13-control catalog; this is a simplified illustration.
ARMADA
Sample record
record  POSTURE ATTESTATION · catalog v2026.07
subject  Cedar Ridge Accounting (sample) · scanned 2026-07-09 14:02:11Z
identity — mfa registration — verified · pass
conditional access enforcement — verified · pass
privileged role hygiene — verified · partial
endpoint detection & response — not verified by this scan
score  91 / 100 over verified controls · status secure
brand  prepared by Northpoint Managed IT (white-label)
chain  prev 9c41…e07a → this 6f2d…b391
sig  ECDSA P-256 · hash-chained to the prior record
Unverified controls say so, in writing — the attestation never guesses, so it can't embarrass you in front of a client. The chain means history can't be quietly rewritten, including by us. Your brand sits on the record; ours doesn't have to appear at all.
Capabilities

Everything the report
stands on.

Fleet posture

Your whole book of clients at a glance — every tenant scored, ranked by risk, and tracked against the controls that actually decide whether they get breached.

Remediation simulator

Toggle a fix and watch posture and status move in real time. Walk into the QBR knowing exactly which change to sell — and what it's worth.

White-label reports

Your logo, your colors, your domain. The client sees your brand on a professional security assessment — and never sees ours.

Chained attestations

Every scan anchors to the one before it. The trail is verifiable by anyone, alterable by no one — including us.

Drift detection

Posture changes between scans are flagged by comparing signed results — a new unprotected admin surfaces the same week, not at the incident.

Ephemeral engine

The core promise, engineered rather than promised: collection, evaluation, and destruction in one breath. You can't leak what you don't keep.

Delegated access

Runs through the delegated admin relationship you already hold — nothing to install in the client's tenant, and they can revoke it any time without asking us.

Verified or labeled

A control is pass, partial, fail — or explicitly "not verified by this scan." The platform structurally cannot invent a status it didn't check.

Client-ready output

Every scan exports as the leave-behind your client actually keeps — the monthly artifact that makes your security line item defend itself at renewal.

Integrations

Verification, source by source.

Coverage grows one integration at a time — and until a source is wired, the controls it would verify are labeled "not verified," never estimated.

Microsoft 365 · Entra
MFA registration, conditional access, privileged roles
First integration · in development
Google Workspace
Identity posture and enforcement state
On the roadmap
EDR platforms
Agent coverage and policy state
On the roadmap
Backup platforms
Immutability and restore-test evidence
On the roadmap
Get started

See it on your own book.

We're working with a small group of MSPs before wider release. Tell us who you are — a founder reads every note.

Request early access