AI Posture Assessment

Enterprise AI posture, scored

Structured visibility across every enterprise AI surface: credentials, connectivity, and configuration.

Scope 3 surfaces · 113 apps · 13 agents
Assessed Jun 15, 2026
Overall posture score
52 of 100
Developing ↗︎ 6 pts vs. last 30 days
Mature70–100
Developing40–69
Critical0–39
Posture pillars
Credentials & Authorization Who holds credentials — and what access those identities and tokens are authorized to use.
42/100 Critical
Connectivity What systems AI connects to — MCP servers, tools, and data repos.
47/100 At Risk
Configuration How agents and harnesses are configured — prompts, model pinning, and guardrails.
54/100 At Risk
Fix first · Credentials & Authorization

Excessive write-scope OAuth on connected AI apps

ChatGPT holds 12 write scopes across 17 third-party apps (Dropbox, SharePoint, HubSpot) for 7 users — and a shadow app carries Mail.ReadWrite. This is the single largest exfiltration blast radius in the org.

View roadmap
Domain assessments

Three pillars, scored from evidence

{{ p.name }}

{{ p.desc }}

{{ p.score }}/100 {{ p.status }}
{{ p.tilesTitle }}
{{ t.l }} {{ t.v }}{{ t.of }} {{ t.n }}
{{ p.findsTitle }}
{{ f.t }} {{ f.d }}
{{ f.a }}
{{ tb.title }} {{ tb.note }}
{{ r.app }} {{ r.sub }}
{{ r.a }} {{ r.b }} {{ r.risk }}
{{ tb.alert.t }} {{ tb.alert.d }}
Sensitive data reaching AI surfaces 30-day detections
{{ b.n }}
{{ b.v }}
Remediation roadmap

Prioritized, with an owner for each item

{{ rc.label }} 2 items
{{ ri.h }} {{ ri.p }} {{ ri.tag }} → {{ ri.owner }}
How this is scored

Each pillar scored from observed evidence

Per-pillar scores roll up controls coverage, exposure and authorization signals collected across all three AI surfaces — endpoint, browser SaaS, and hosted cloud. Priority of any finding is a product of two dimensions:

Priority = blast radius × velocity (1–25)

Blast radius — sensitivity of reachable data and breadth of connected systems. Velocity — how autonomously a surface can act without a human checkpoint.

Maturity bands
Matureleast-privilege, enforced70–100
Developingpartial coverage, drift40–69
Criticalexcessive access, gaps0–39

This org sits at 52 — Developing, dragged down by Credentials & Authorization (42). Closing the two P1 items lifts the projected score above 60.