Coming soon

See who and what can reach your Microsoft Entra applications.

Epigraph maps applications, service principals, permissions, credentials, ownership and Conditional Access in Microsoft Entra, then turns them into security findings, risk and compliance evidence for ISO/IEC 27001 and NIST CSF 2.0.

• MapEffective access through nested groups, owners, credentials and consent, kept as versioned history.
• FindDetection rules with evidence, a 0–100 risk model and the fixes that remove the most risk.
• ProveRisk register, Statement of Applicability and audit-ready evidence, with two-person approval for changes.

We're building the site. To talk to us or see a demo, email hello@epigraph-security.com.