Skip to content
Free Tool

How mature is your zero-trust posture?

In 2026 the perimeter is identity. This scorecard checks the controls that actually stop modern attacks, most of which start with a valid login in the wrong hands.

How it works

  • 1Answer six questions about identity, access and detection.
  • 2Get an instant maturity score and band — no email needed to see it.
  • 3Unlock tailored next steps + a branded PDF, and (optionally) a call to close the gaps.

Identity-first. Most modern breaches start with a valid login in the wrong hands — not a firewall gap. This scorecard weights the controls that actually stop that, and is sized for mid-market teams, not a Fortune 500 SOC.

1. Is phishing-resistant MFA enforced?
2. Do you use risk-based Conditional Access?
3. How is privileged (admin) access managed?
4. Is access gated on device compliance (e.g. Intune)?
5. Is access granted per-app/data, or network-wide?
6. Do you have identity threat detection (ITDR) and logging?

A directional self-assessment. No email needed to see your score.