The MFA-coverage question, answered
Identity Posture
MFA coverage and privileged access across your IdP and SaaS tenants. The single question a CEO has heard of, answered with a defensible number blended across Google Workspace, Microsoft 365, and Okta.
Why it matters
Built for outcomes, not checkboxes
MFA Coverage, Defensible
The CEO asks, you answer with a number. 88% coverage across 50 users, color-coded red if below 90, amber 90-97, green 98+.
Privileged Without MFA
The critical-gap number every audit wants. Global Administrators, Super Admins, privileged roles without MFA enrolled, flagged in red.
Stale Accounts
No login in 90+ days. Top SOC 2 and HIPAA finding. The stale-privileged subset is called out separately.
Never-Logged-In Accounts
Provisioned but never used. Orphans from rushed onboarding or test users left behind. Surface them before an auditor does.
How it works
Everything in one place, nothing to bolt on
Multi-Source Blended Rollup
Google Workspace, Microsoft 365, and Okta all feed the same identity_accounts table. The MFA coverage % blends across every connected provider. Each account row is tagged with its source for filter drill-in.
- Google Workspace: 2SV status, admin/delegated admin, last login
- Microsoft 365: per-user MFA registration, Global Administrator roster
- Okta: per-user admin roles and MFA (rollout in progress)
- Source badge on every account row
Leader-Framed Default View
The page opens on 'Privileged accounts without MFA', the highest-signal query a vCISO can run in a minute. Zero rows is defensible posture. Switching views covers stale-privileged and all-privileged.
- Default: Privileged without MFA (critical gap)
- Alt view: Stale privileged accounts
- Alt view: All privileged accounts
- Search by email or name across accounts
Auto-Tagged Risk Flags
The writer auto-tags risk_flags during sync: no_mfa_on_privileged, stale (90+ day), never_logged_in. No manual triage to surface the right rows; the badges follow the account.
- no_mfa_on_privileged: privileged account missing MFA
- stale: no login in 90+ days
- never_logged_in: provisioned but unused
- Custom risk flags carryable from source payloads
Exec Strip with Tone Coloring
Four tiles at the top: MFA Coverage %, Privileged Accounts, Privileged Without MFA, Stale Accounts. MFA tile colors by threshold (red <90, amber 90-97, green 98+) so the posture reads at a glance.
- MFA Coverage % with threshold-based coloring
- Privileged total with MFA coverage call-out
- Critical-gap tile: privileged without MFA (red when >0)
- Stale tile: privileged subset called out separately
Get started today
Run your security program, not just your tools
Whether you're the security lead holding it together in-house without a CISO, or a vCISO, consultant, or MSSP running client programs, Radius360 turns your stack into decisions your board and auditors trust.
We use cookies
We use strictly necessary cookies to make Radius360 work. With your consent, we'd also like to use analytics cookies to understand how visitors use our site so we can improve it. You can change your choice anytime. See our Privacy Policy.