SPB Labs · Identity Security

IdentityGuard

Identity Security Posture Assessment for Microsoft Entra ID & Active Directory

Analyze identity data, surface security gaps, prioritize remediation, and translate technical findings into an executive-ready risk summary.

V0.1 uses synthetic demo data or local file imports only. No tenant credentials or Microsoft Graph connection is required.

Assessment Dashboard

Identity Security Posture

No dataset loaded
-- /100

Overall Rating

Load a dataset

Use the demo dataset or import your own sanitized CSV/JSON file.

0Critical
0High
0Medium
0Low

Remediation Potential

Fix the highest-impact issues first

Projected score assumes the five highest-score-impact findings are remediated.

-- Projected score

Executive Summary

Risk translated into action

Load an assessment to generate an executive summary.

Audit & Evidence Pack

Package assessment evidence for review and sign-off

Run an assessment to generate the audit and evidence view.

Executive / Management Mode

Identity risk in leadership language

Run an Entra, Active Directory, or Hybrid assessment to generate the management view.

Visual Reporting

See risk at a glance

Severity, category posture, and remediation impact update automatically with each assessment.

Finding Severity

Risk Distribution

0 Findings
Critical0
High0
Medium0
Low0

Remediation Impact

Current vs Projected

Current --
→
Projected --

Run an assessment to calculate potential improvement.

Security Areas

Category Posture

No assessment
Category scores will appear after an assessment.

Assessment Context

Identity Environment Snapshot

--Identities
--Privileged
--Applications / Computers
--Assessment Type

Remediation Tracker

Turn findings into managed work

Browser-local remediation records Status, owner, target date, notes, and remediation evidence are stored only in this browser. IdentityGuard does not send them to a server.
Open 0
In Progress 0
Accepted Risk 0
Resolved 0
Current assessment remediation progress 0%
Run an assessment to begin remediation tracking.

Assessment History

Measure improvement over time

Browser-local history IdentityGuard stores only assessment summaries in this browser—scores, severity counts, category scores, and finding titles. Raw imported identity data is not saved to history. V0.9 can export/import these summary snapshots as a portable JSON package.
Portable Assessment Package Export saved summary snapshots to a JSON file and import them on another browser/computer for comparison. The package intentionally excludes raw user, group, device, application, and tenant source data.
Ready

Saved Assessments

Snapshots

0 saved
No snapshots saved yet. Run an assessment and choose Save Snapshot.

Before vs After

Compare two assessments

Save at least two snapshots to compare improvement.

Prioritized Findings

What needs attention

Remediation Playbooks Each finding now includes the trigger/evidence basis, a recommended remediation sequence, and a verification step so the assessment can be rerun to confirm improvement.
No findings yet. Load the demo assessment or import data.

Hybrid Identity Assessment

Correlate Entra ID + Active Directory

Processed locally in your browser
1. Select Entra assessment JSON

Generate it with the IdentityGuard Entra Collector.

2. Select Active Directory assessment JSON

Generate it with the IdentityGuard AD Collector.

Hybrid Correlation

One view across cloud and on-premises identity

IdentityGuard matches identities primarily by normalized user principal name and looks for cross-environment privilege, MFA, Conditional Access, lifecycle, and credential inconsistencies.

Testing only: Demo Entra JSON · Demo AD JSON

Select both files to begin.

Import Mode

Analyze sanitized identity data

IdentityGuard V0.1 supports a full JSON schema or a user-focused CSV. Processing happens in your browser for this prototype.

Need an assessment file?

Use the IdentityGuard collectors to create JSON automatically from an authorized Microsoft Entra ID or on-premises Active Directory environment. Entra Collector V0.4 includes PIM/group privilege intelligence, deeper Conditional Access posture, and application consent/permission analysis.

Workflow: Download collector → run locally → sign in to Microsoft Graph → JSON created locally → import it here.

No file selected.