The EnscureX blog
How identity attacks work, how audits test access, and how to find the applications nobody approved. Each article answers one question and names its sources.
Latest articles
ITDR vs ISPM vs IGA: How the Three Fit TogetherIGA decides who should have access, ISPM finds the openings, and ITDR catches an account in use by an attacker. Here is how the three connect.
Employee Offboarding Checklist: OAuth Grants, Sessions and API KeysDisabling the directory account is the first step of offboarding. This checklist covers the sessions, OAuth grants and keys that outlive it.
User Access Review Checklist: 12 Steps From Scope to EvidenceA user access review checklist in 12 steps: scope, reviewers, evidence on each row, the no-response rule, removal after the review, and the export.
What Is ITDR? Identity Threat Detection for SaaS-First TeamsIdentity threat detection and response (ITDR) watches what accounts do after sign-in. Here is what it reads, what it catches and how to judge a tool.
What Is Identity Security Posture Management (ISPM)?ISPM finds the identity gaps an attacker could use, such as admins without MFA and apps nobody owns. It ranks each one by what the account can reach.
How to Audit Third-Party OAuth App PermissionsFind every OAuth grant your people and admins gave to third-party apps, read what each permission reaches, then keep, limit or remove it.
SOC 2 User Access Reviews: Cadence, Evidence and What Auditors CheckSOC 2 sets no access review schedule. What CC6.2 and CC6.3 expect, the evidence auditors sample, and the exceptions they write up.
Shadow AI Discovery: How to Find the AI Tools Nobody ApprovedShadow AI discovery starts with identity data: sign-in logs, OAuth grants, email metadata and the browser. Find each AI tool, then decide what to do.
From the glossary
Non-human identityA non-human identity is an account or credential software uses to authenticate. Examples, why they matter, and how to govern them.
Orphaned accountAn orphaned account still works after its owner has gone. How accounts become orphaned, why attackers like them, and how to find them.
Shadow ITShadow IT is software people use for work without approval. Where it comes from, why it matters for identity security, and how to find it.