Platform Method & Trust Contact Request access
The platform

Made for your console. Written for your client's QBR.

Three views from the MSP console: the fleet, the simulator, and the record. Everything below runs on sample data and says so, because we don't fake traction and we don't fake posture.

ARMADA
Sample data
ClientPostureFindings mixStatus
Cedar Ridge Accounting
Accounting · 17 seats
910 H1 M14 okSecure
Vance Realty
Real estate · 22 seats
741 H3 M8 okNeeds work
Brookline Dental Group
Dental · 31 seats
622 H4 M9 okNeeds work
Harbor Law LLP
Legal · 29 seats
483 H5 M5 okAt risk
Every client tenant carries its verified posture score, findings mix, and status, so the QBR starts from evidence instead of a screenshot.
ARMADA
Illustrative model
Enforce MFA on every admin
The heaviest single control on the catalog
Block legacy authentication
It walks straight past MFA. Still a top attack vector.
Reduce Global Admins to four
Standing privilege is standing risk
48
Posture score
At risk
Closes 0 of 3 critical gaps
Toggle a fix and watch the score and status move. That's the QBR, rehearsed: you walk in already knowing which change buys your client the most ground. The live product runs the full 13-control catalog, and this is a simplified illustration of it.
ARMADA
Sample record
record  POSTURE ATTESTATION · catalog 2026.07.0-graph1
subject  Cedar Ridge Accounting (sample) · scanned 2026-07-09 14:02:11Z
identity · mfa registration · verified · pass
conditional access enforcement · verified · pass
privileged role hygiene · verified · partial
endpoint detection & response · not verified by this scan
score  91 / 100 over verified controls · status secure
brand  prepared by Northpoint Managed IT (white-label)
chain  prev 9c41…e07a → this 6f2d…b391
sig  ECDSA P-256 · hash-chained to the prior record
Unverified controls say so in writing, so the attestation can't embarrass you in front of a client by guessing. The chain means the history can't be quietly rewritten, including by us. Your brand sits on the record, and ours never has to appear at all.
ARMADA
Sample chain
2026-04-02 · baseline
First scan

Two administrators had never registered for MFA, and the Conditional Access policy meant to enforce it was sitting in report-only mode, which looks configured on a screenshot and enforces nothing at all.

score 61 · at risk · knockout failing
2026-05-07 · routine
Remediation verified

Both admins registered, and the policy moved from report-only to enforced. The MFA knockout clears. Privileged access still scores partial, because eleven standing Global Admins is more than the control allows.

score 78 · needs work · knockout cleared
2026-06-11 · drift detected
A new Global Admin appeared without MFA

Created during an onboarding four days earlier, and nobody would have looked until the next quarterly review. Comparing the signed records surfaced it that week. Because MFA is a knockout control, one unprotected admin puts the whole tenant back at risk regardless of the other twelve.

score 78 → 66 · back at risk
2026-07-09 · routine
Closed, and the record shows it

The account was brought under policy and standing admins were cut to four. Every step above stays in the chain, which is what turns a year of quiet maintenance into something a client can actually read.

score 66 → 91 · secure
Drift is found by comparing one signed record against the one before it, which is why it costs nothing to keep watching. Note the third entry: a single unprotected admin overrides twelve healthy controls, because a knockout is not a deduction. It is a ceiling.
Capabilities

Everything the report
stands on.

Fleet posture

Your whole book on one screen. Every tenant scored, ranked by risk, and tracked against the controls that actually decide whether they get breached.

Remediation simulator

Toggle a fix and watch posture and status move in real time. You walk into the QBR knowing which change to sell and what it's worth.

White-label reports

Your logo, your colors, your domain. Your client sees a professional security assessment with your name on it, and never sees ours.

Chained attestations

Every scan anchors to the one before it. Anyone can verify the trail. Nobody can alter it, and that includes us.

Drift detection

Posture changes between scans are caught by comparing signed results. A new admin without MFA surfaces that week, long before it turns into an incident.

Ephemeral engine

The core promise is engineered rather than promised: collection, evaluation, and destruction happen in one breath. You can't leak what you don't keep.

Delegated access

Runs on the delegated admin relationship you already hold. There's nothing to install in your client's tenant, and they can revoke it any time without asking us.

Verified or labeled

A control is pass, partial, fail, or plainly "not verified by this scan." There is no fifth option, and no code path that invents a status the scanner didn't check.

Client-ready output

Every scan exports as the leave-behind your client actually keeps: the monthly document that makes your security line item defend itself at renewal.

The catalog
version 2026.07.0-graph1

All thirteen controls,
weight by weight.

Published in full, including the eleven we cannot verify yet. A knockout control caps the tenant's grade on its own rather than merely costing it points, and a control the scan couldn't reach is recorded as a coverage gap instead of a failure. The version above is stamped onto every attestation, so a result from this catalog stays interpretable after the catalog moves on.

Identity & Access2 controls · weight 20
MFA on all remote and privileged access Knockout 14 Verified
Privileged access managed and least-privilege 6 Verified
Endpoint & Detection2 controls · weight 18
EDR/XDR deployed on all endpoints Knockout 13 Not verified
No end-of-life or unsupported systems 5 Not verified
Data Resilience2 controls · weight 18
Immutable, tested, offline backups Knockout 13 Not verified
Encryption at rest on endpoints and servers 5 Not verified
Email & Perimeter2 controls · weight 17
Secure email gateway and anti-phishing Knockout 11 Not verified
No high-risk exposed services such as RDP or SMB 6 Not verified
Vulnerability2 controls · weight 12
Critical patches within 14 days 8 Not verified
Recurring vulnerability scanning 4 Not verified
Governance & Response2 controls · weight 10
Incident response plan and tabletop 6 Not verified
Centralized logging and 90-day retention 4 Not verified
People1 control · weight 4
Security awareness and phishing simulations 4 Not verified
13 controls · 99 points of weight · 4 knockouts. Two controls, worth 20 points, are verified by the first integration. The score is computed across verified controls only, so eleven coverage gaps do not quietly drag a tenant toward zero. If nothing at all can be verified, the result reads "insufficient verified data" rather than a score.
Integrations

Verification, source by source.

Coverage grows one integration at a time. Until a source is wired up, the controls it would verify are labeled "not verified" rather than estimated.

Microsoft 365 · Entra
MFA registration, conditional access, privileged roles
First integration · in development
Google Workspace
Identity posture and enforcement state
On the roadmap
EDR platforms
Agent coverage and policy state
On the roadmap
Backup platforms
Immutability and restore-test evidence
On the roadmap
Get started

See it on your own book.

We're working with a small group of MSPs ahead of wider release. Tell us who you are. A founder reads every note.

Request early access