Security & Compliance
Zero Trust Architecture · AES-256 · TLS 1.3 · HashiCorp Vault · SOC 2 Type II In Progress
Security Posture Score
Zero Trust Status
MFA Enforcement
472 / 480 accounts enforced
SSO Coverage
113 / 120 apps integrated
Privileged Access Reviews
Last reviewed: 2026-03-01
Device Compliance
438 / 480 endpoints compliant
Network Segmentation
47 micro-segments active
Least Privilege Violations
Pending remediation review
Data Encryption
Data at Rest
AES-256-GCM
Data in Transit
TLS 1.3
Key Rotation
90-day policy
Backup Encryption
AES-256
Vulnerability Scanner
Last: 2026-03-17 06:00:01 · 14m 33s · 483 hosts
3
Critical
12
High
47
Medium
119
Low
✓ 28 patched in last 7 days
Active Sessions
| User | Role | Location / IP | Device | Activity | Risk | Action |
|---|---|---|---|---|---|---|
rachel.kim @apexdynamics.io | Admin | San Francisco, CA 38.102.149.44 | MacBook Pro 16" macOS 15.2 | 2 min ago | 12 | — |
jason.park @cloudvault.com | Engineer | Austin, TX 104.28.214.87 | ThinkPad X1 Ubuntu 24.04 | 8 min ago | 18 | — |
unknown @185.220.101.0 | Unknown | Frankfurt, DE 185.220.101.62 | Unknown Linux x86_64 | Just now | 91 | |
priya.sharma @novatech.ai | Data Scientist | Seattle, WA 73.140.228.19 | MacBook Air M3 macOS 15.2 | 1 min ago | 8 | — |
marcus.webb @pinnacledevops.co | DevOps | Chicago, IL 96.250.141.33 | Windows 11 Pro Windows 11 | 47 min ago | 34 | — |
evelyn.cho @skybridgecap.com | CFO | New York, NY 203.0.113.101 | iPad Pro iPadOS 18.2 | 12 min ago | 21 | — |
svc-deploy @pinnacledevops.co | Service Account | Unknown / Cloud 34.102.136.180 | GCP Compute Container | Just now | 55 |
Audit Log
rz-security-agent → 185.220.101.47
rachel.kim → mfa-enforcement-policy
unknown@185.220.101.62 → admin-portal
rz-security-agent → cloudvault-ep-09
jason.park → vault/prod/db-credentials
svc-deploy → cluster-admin
rz-security-agent → vault/transit/data-key
evelyn.cho → financial-audit-q1-2026
Compliance Frameworks
5 frameworks tracked · click View Controls for detailsSOC 2 Type II
Complete evidence collection for CC6.1–CC6.6
Due: 2026-04-01
ISO/IEC 27001:2022
Annual surveillance audit
Due: 2026-07-15
Expires: 2027-06-30
HIPAA Security Rule
BA Agreement audit — MedCore Health
Due: 2026-06-01
Expires: 2027-01-14
PCI DSS v4.0
Remediate Req. 6.4 and 10.7
Due: 2026-04-15
EU General Data Protection Regulation
DPIA review for new EU data processor
Due: 2026-05-01
Expires: 2026-12-31