Your controls are switched on. Are they working?
RiskSight is our security posture assessment and validation product. It combines automated posture measurement with human validation where tooling alone can’t confirm whether a control is effective.
The principle: Automated assessment identifies control presence. Validation confirms control effectiveness.
Estate-Wide Verification
Buy either alone, or both for full estate coverage. They are priced separately and are not bundled by default.
RiskSight for Microsoft 365
Assesses 6 core workloads against the CISA SCuBA baseline mandated by the US federal government (aligned to BOD 25-01).
- Entra ID, Defender, Exchange Online
- SharePoint, OneDrive, Teams, Power Platform
- SPF, DKIM, DMARC email domain audit
- License inventory assigned vs available
RiskSight for Azure
270 controls across 10 modules evaluated against the CIS Microsoft Azure Foundations Benchmark and CISA baselines.
- Weighted scoring (Critical/High/Medium/Low)
- Top 10 roadmap with percentage Posture Boost
- Deduplicated findings across resources
- 24-hour report delivery guarantee
What RiskSight is not — stated plainly
- Not a penetration test: It does not simulate active adversarial intrusion.
- Not a formal certification or audit: It provides operational verification, not legal sign-off.
- Not 24×7 monitoring: It is a point-in-time assessment or scheduled quarterly audit.
- Not remediation: RiskSight identifies and prioritises gaps; fixing them is Security Accountability CORE/STRATEGIC or a scoped project.
Where it sits in the market
Comparable posture assessments in South Africa are often given away free as a lead into managed security. RiskSight goes deeper and is human-validated — above the free tools, well below a bespoke audit or penetration test.