Client workspace
Northstar Financial
Managed detection and advisory
Security posture is stable with two priority actions due this week.
Endpoint coverage recovered overnight. Identity hardening remains the fastest risk reduction path.
SOC
EDR
IAM
Cloud
Apps
Priority queue
Actions requiring approval
Coverage
Service health
Risk register
Findings
| Finding | Severity | Owner | Due | Status |
|---|
Rampart Digital service
Exposure Intelligence
Have I Been Pwned enrichment
Turn breach hits into a managed remediation queue.
Rampart groups exposed identities, affected data classes, password-risk signals, and next actions so BTA clients see what needs attention without reading raw breach feeds.
Exposure posture
--
Loading service data
HIBP subscription
Pwned 2
Client coverage
Managed domains
Identity exposure
Prioritized accounts
Breach digest
Client context
Password hygiene
Pwned Passwords workflow
Privacy-preserving checks
Future password checks should hash locally and send only the SHA-1 prefix to the Worker. Rampart stores the match result and action, never the password.
Hash locally
Range lookup
Reset guidance
Rampart Digital platform
Service portfolio
Client protection services
One operating layer for exposure, privacy, and secure client communications.
The web app gives BTA operators portfolio oversight. The mobile app gives high-net-worth clients a trusted action surface for alerts, approvals, removals, and secure conversations.
Initial pillars
3
Shared API model
Web app
Operator and client workspace
Mobile app
Client action and secure response surface
Service desk
Requests
Inventory
Assets
Evidence library
Reports
Operator workspace
Client administration
Create client
New account
Access
Invite user
Add a managed domain before inviting users to a client account.
Domains
Add managed domain
Tenants
Clients and domains
Access queue
Recent invitations
Workspace controls
Settings
Authentication
Passkey access
Rampart should use passkeys as the primary authentication path for web and mobile clients, with managed recovery only when a trusted device is unavailable.
Passkey status will appear here.
Bootstrap
BTA owner access
Claim the initial BTA owner role for this signed-in passkey identity. This closes after the first owner is created.
Bootstrap status will appear here.