Identity tools.
Hands-on tools I built to make identity security tangible — benchmark your program, and watch access decisions happen in real time. Free, private (everything runs in your browser), and relevant to any industry.
Cyber Security Posture Assessment
The flagship: a board-grade self-assessment across nine domains — IAM, privileged access, encryption, STRIDE threat modeling, attack surface, detection & response, GRC, resilience and multi-cloud (AWS · Azure · GCP). Get a maturity profile, a residual-risk heatmap, STRIDE coverage, attack-path exposure, and readiness against ISO 27001, SOC 2, NIST CSF 2.0 and CIS — with a prioritised remediation roadmap and a downloadable PDF.
Open assessmentIAM Maturity Index
A rapid, vendor-neutral self-assessment of your identity & access program across six domains. Answer 12 questions and get an instant maturity score, a radar profile of your strengths and gaps, and tailored next steps — with a downloadable PDF report.
Open assessmentZero-Trust Decision Simulator
See per-request access control in action. Change the identity, device, network, MFA and privilege and watch the verdict flip between allow, step-up and deny in real time — each with a plain-English reason and a factor-by-factor trace.
Open simulatorIdentity Risk Calculator
Enter a few details about your organisation — size, sector, current controls — and get an instant identity-risk exposure score, an estimate of how many identities you actually have to govern, and your top risk drivers. A fast, boardroom-ready way to size the gap.
Open calculatorEnterprise IAM Reference Architecture
A vendor-neutral blueprint for enterprise identity — sources of truth → IGA → IdP/PDP → PAM → resources, with ITDR and governance across it all. Includes trust zones, key flows, anti-patterns and a phased adoption roadmap. Free to adopt with attribution.
Open architectureIdentity Security Baseline
30 vendor-neutral identity controls across six domains — each with implementation guidance and the audit evidence to collect — mapped to NIST CSF, ISO 27001, the Essential Eight and CPS 234. Track coverage, export to PDF, adopt it in your own assessments.
Open baselineNeed a deeper assessment?
These tools are a starting point. For a full identity maturity review or help closing the gaps they surface, let's talk.
Get in touch