Skip to content
Identity & security

Identity and security tools: posture questions for security leaders

Security teams answer the same posture questions every week for leadership and auditors: MFA coverage, open critical findings, stale accounts, access review progress.

These connectors will read posture and operations data under each analyst's role, and are designed for reporting, never for changing configuration.

Identity & security connectors

  • CrowdStrike

    CrowdStrike AI questions for security operations: Falcon sensor coverage, open detections, Spotlight vulnerabilities and time to contain by host group.

    Status: Available
  • Google Workspace Directory

    Google Workspace reporting from the directory: 2-step verification enrolment, suspended users, group membership and devices by organizational unit.

    Status: Available
  • Microsoft Entra ID

    Entra ID reporting through Microsoft Graph: MFA registration, risky sign-ins, privileged role holders, guest accounts and stale users by department.

    Status: Available
  • Microsoft Sentinel

    Microsoft Sentinel AI questions for SOC leads: open high-severity incidents, mean time to close, noisy analytics rules and data connector health.

    Status: Available
  • Okta

    Okta reporting in plain language: MFA factor enrolment, dormant accounts, app assignments, admin roles and failed sign-ins from the System Log.

    Status: Available
  • SailPoint

    SailPoint AI questions for identity governance: certification progress, orphaned accounts, entitlement counts and access request approval time.

    Status: Available
  • Wiz

    Wiz MCP questions for cloud security teams: open critical issues by project, vulnerability age, misconfiguration trends and time to resolve.

    Status: Available

Questions that cross these systems

  • What share of active users are enrolled in phishing-resistant MFA?
  • How many critical cloud findings have been open longer than 30 days?
  • Which access reviews are overdue, by application owner?

Questions and answers

Can security data be limited to the security team?
Yes. Each tool's own roles will apply, and Nexatron's access rules let an administrator restrict who can ask about security sources at all.

Need a system from this list?

Tell us which system and which questions, and we will scope a pilot on your own data.

Contact us