For IAM Consultants

Your Assessment Engine

Connect any IAM stack. Correlate across platforms. Generate CISO-ready reports. In hours, not weeks.

See Compass in your environment.

A 30-minute walkthrough against an environment like yours, so you can tell quickly if Compass fits.

Request a Demo
Microsoft Entra ID
SailPoint
Saviynt
CyberArk
Okta
ServiceNow
AWS IAM
Workday
+ more via MCP

Three Steps to a Complete IAM Assessment

Define the problem. Connect your systems. Get a CISO-ready report.

Define

Problem statement, goals, report focus

Connect & Collect

Live data from your IAM stack via MCP

Report

AI-generated assessment, ready to present

Seven Layers Beyond the Report

Any MCP tool can pull data and write a summary. These are the layers that build enterprise reliability — so decisions are well-grounded, auditable, and built to improve over time.

Reliable·Auditable·Adaptive
01Initial Report

Connector data in. Defensible baseline out.

Connect the IAM stack that matters for the workflow under review. Compass analyzes signals across those systems and delivers a structured baseline report in hours, not weeks.

  • Live metrics from your enterprise systems via MCP
  • Cross-platform gaps surface automatically
  • Executive summary, findings, risk scores, roadmap
  • v1.0 delivered in hours — not weeks of manual work
Report Ready
v1.0
Cross-Platform Identity Assessment
12
Key Findings
3
Quick Wins
High
Overall Risk
24pg
Full Report
02Knowledge Layer

Context beyond your connector data.

Every report is enriched with industry benchmarks, compliance intelligence, and best practices scoped to your team's industry, frameworks, and goals.

  • Industry benchmarks — automation rates, provisioning SLAs, certification norms
  • Compliance intelligence — SOX, HIPAA, NIST, ISO 27001 built into findings
  • Scoped to your environment's industry and frameworks
  • Supports customer-specific context without relying on generic maturity slides
Benchmarks
Automation rates, provisioning SLAs
§
Compliance
SOX, HIPAA, NIST, ISO 27001
Best Practices
Zero-trust, RBAC, PAM patterns
Vendor Landscape
Analyst research & comparisons
Continuously updated knowledge base
03Cross-System Correlation

Risks invisible to any single tool.

Compass correlates identity data across your entire stack, surfacing gaps that no single platform can detect on its own.

  • Correlates identity records across all connected platforms
  • Surfaces cross-platform risks no single tool can see
  • Severity-ranked findings auto-classified into the report
  • Runs automatically — no separate spreadsheet exercise
Platform A
Correlation
Platform B
CriticalCross-platform risk detected
HighCross-platform risk detected
MediumCross-platform risk detected
04AI Self-Audit

Know it's right before you present.

AI reviews the report for logical consistency, accuracy, and narrative coherence. Issues surface as clear flags before you circulate the baseline internally, not after.

  • AI audits its own output before you see it
  • Issues surface as clear flags before the report is shared broadly
  • Apply corrections in one click — no manual re-editing
Narrative consistency verified
Metrics match source data
!
Action items need detail
Cross-references validated
Auto-corrections applied
05Calibration

First draft is just the start.

A 5-step baseline finalization flow lets you review AI's understanding, correct assumptions, upload additional supporting data mid-workflow, and promote the first draft to a calibrated v2.0 baseline shaped by your team's actual reality.

  • Review before finalizing — verify AI understanding, scope, and assumptions
  • Upload additional supporting data mid-workflow
  • Fast path when the draft is already correct
  • Promotes the first draft to a calibrated v2.0 baseline
  • Resumable — save progress and continue later
Problem Understanding
Review AI's reading of the brief
Analysis Approach
Confirm methodology
Data Sources
Upload additional context
04
Clarifications
Answer AI's follow-ups
05
Review & Confirm
Trigger regeneration
↳ Produces v2.0
06Dig Deeper

Chat with any finding.

Every metric has a Dig Deeper button that opens a chat scoped to that specific finding. AI answers from report context plus external research — cite benchmarks, compliance standards, vendor docs.

  • Scoped chat on any metric or finding
  • Answers from report context + external research
  • No more "I'll follow up on that" — answer CISO questions on the spot
  • Conversation persists — pick up where you left off
Dig Deeper
Scoped to Finding #4
Live
Why is this flagged as high severity?
Y

This finding affects multiple connected systems and exceeds industry benchmarks for acceptable risk thresholds.

NIST 800-53
Vendor docs
What should we remediate first?
Y
Ask about this finding...
07Re-run & Compare

One baseline becomes repeatable proof.

Rerun from the accepted baseline with updated connector data. Compass detects what changed since the last version, builds the before and after comparison into every rerun, and gives teams a repeatable control-verification workflow.

  • Rerun the accepted baseline with updated connector data
  • Before/after comparison built into every version
  • Turn one-time discovery into repeatable proof of improvement
Current baseline
Next minor version
Ticket Volume Improved
85/mo
52/mo
Automation Rate Improved
35%
68%
Avg Provisioning Time Improved
72hrs
28hrs
Metrics pulled live from your connectors

Bring Compass into your IAM workflow.

Request a personalized demo to review your current stack, evidence workflow, and what a real rollout would look like.