Signals

Raw telemetry in. Verified meaning out.

Signals turn telemetry into business meaning — “risky user,” “unmanaged device,” “backup safety margin.” Declare what healthy means once; every signal is scored against it continuously, with thresholds, drift history, and evidence behind every number.

Signal tracking
Live
Okta Admin Assurance
Okta · Entra ID · Workday
61
verified posture
MFA enrollment
94%
target 100%
Dormant accounts (90d+)
41
target 0
Super-admin count
12
target ≤ 4
Sensor alert coverage
100%
target 100%
9 signals tracked · 5-minute cadence · refreshed 40s ago

How Signals work

Declared thresholds, continuous scoring, real-time breaches, routed fixes.

Declared thresholds9 signals
MFA enrollment
critical below 97%
100%
Dormant accounts (90d+)
warn above 10
0
Super-admin count
critical above 8
≤ 4
Offboarding SLA
critical above 48h
≤ 24h
Okta auth anomalies
severity high → queue
detection feed
Declared once · watched forever

Start with what 'healthy' means — in your words.

Signals begin with the conditions that define your standing posture — MFA coverage, dormancy limits, super-admin counts, telemetry continuity. Your definitions of risky, compliant, and ready — not a vendor's. Declared once, scored forever.

  • Thresholds declared per population and initiative, not per audit cycle
  • Your definitions of “risky” and “healthy” — not vendor defaults
  • Definitions carry forward across teams, owners, and reorgs

Why Signals

Declared conditions, scored continuously, remediated in flight.

Posture stops being a quarterly audit.

Most teams learn about identity drift, posture regressions, or dormant assets at the next audit cycle — months after they happen. Signals move the truth to the source, scored every few minutes.

Business meaning, not raw noise.

“Risky user.” “Unmanaged device.” “Backup safety margin.” Signals compose raw telemetry into judgments a CISO can read and an auditor can trace — with the evidence attached.

Every breach has a fix already filed.

Signals don't dump alerts into a queue and walk away. Breaches become work items routed to the right owner with full context — and nothing clears until the signal re-verifies.

The scoring never stops.

Signals keep every declared condition scored against reality — with the receipts to prove it. Try it on your own systems.