NEWFreshservice is now a Ploy integrationSee what shipped
Offboarded people with active access · CriticalGoogle super admins with no MFA · CriticalUsers with phishable MFA · High
1.0IDENTITY SECURITY POSTURE

Know your riskiest identities. Human or not.

Identity security posture is the risk your access is carrying right now: who can reach what, whether they still should, and how long that has gone unchecked. Ploy finds those risks, from dormant admin accounts to agents without owners, and gives each one a path to completion. Luna by your side the entire time.

Book a demoSee how Luna works
IdentitiesEvery human and non-human identity, grouped into the segments you govern.
OverviewSegmentsInventory
Health risks
1,41914.5%from peak

Unreviewed identities in critical & high‑severity control segments

Fix with Luna
Track segmentsSensitivityIdentityReviewed
859identities59% reviewedHigh570Medium156Low133
Control segmentsSeverityIdentityReviewed
2,576identities42% reviewedCritical1,246High1,031Medium299
Pinned segments
Offboarded employees with still-active access37 identities · 18% reviewedDormant service accounts with privileged access409 identities · 50% reviewedUnused VPN accounts with active credentials342 identities · 60% reviewedUnpatched critical software vulnerabilities97 identities · 70% reviewed
Segments12
All12Control9Track3IdentitySensitivitySort
Offboarded employees with still-active accessControl•Human•↑ 8.2%37identities18% reviewed7/37
Contractors past end date with live credentialsControl•Human•↑ 5.9%52identities25% reviewed13/52
Dormant service accounts with privileged accessControl•Non-human•↑ 5.4%409identities50% reviewed307/683
Inactive user accounts with admin privilegesControl•Human•↑ 2.8%180identities40% reviewed180/450
Hardcoded credentials found in public repositoriesControl•Non-human•↑ 6.1%76identities22% reviewed17/76
Unused VPN accounts with active credentialsTrack•Human•↓ 3.1%342identities60% reviewed342/570
API keys with no rotation in 180+ daysControl•Non-human•↑ 3.7%264identities45% reviewed119/264
Expired passwords not reset within 90 daysControl•Human•↑ 3.2%215identities30% reviewed215/715
Service accounts with overly broad scopesTrack•Non-human•↑ 2.4%156identities52% reviewed81/156
Unencrypted sensitive data stored on shared drivesControl•Non-human•↑ 1.6%128identities80% reviewed128/160
Unpatched critical software vulnerabilitiesControl•Non-human•↑ 2.1%97identities70% reviewed97/139
Stale OAuth grants from deprovisioned appsTrack•Non-human•↑ 1.9%133identities66% reviewed88/133
1.1DETECTIONS

Thirty-five detections, five frameworks.

Ploy names and maps each one, from dormant admin accounts and standing production credentials to phishable MFA and agents with no owner. Enable a detection and it starts scanning within seconds.

Admin without MFASOC 2 · CC6.1ENABLED
Standing production accessISO 27001 · A.9ENABLED
Dormant account · 90 daysSOC 2 · CC6.2ENABLED
Agent without an owner1 FINDINGINTERNALENABLEENABLED

Sensible defaults on day one

Safe checks are enabled by default. Each detection carries its framework mapping, its severity and its own scan cadence, and enabling the rest takes one click.

Seconds from grant to first scan

A new grant is scanned within seconds of landing, so a risky one reaches you today rather than turning up in next quarter's audit.

Severity you assign, evidence you keep

Each detection carries the severity your team gave it, and every firing keeps the evidence that tripped it, ready to hand to an auditor.

1.2THE LIFE OF A RISK

Risks that get fixed, not filed.

When a detection fires, Ploy opens a record and stays on it until the access itself has changed. Follow one risk from the scan that found it to the number it moved.

IssuesADMIN WITHOUT MFA · ISS-2481SCANNING
D. Kim — Entra ID · Global AdministratorMFA · OFF
ADMIN WITHOUT MFASOC 2 · CC6.1FIRST SEEN · 09:41
LUNA’S READ

Last sign-in 41 days ago, owner unassigned, and none of the other four admins hold this without MFA. Deprovision is the likely route.

DeprovisionSend to reviewExcept, with a reason
✓ Removed in Entra ID · verified · evidence attached
Health risks↘ 31% THIS QUARTER
1,419
Unreviewed identities in critical and high-severity control segments
Fix with Luna
Offboarded, still activeCRITICAL · 37
Admins without MFACRITICAL · 5
Standing production accessHIGH · 12
Reviewed this weekCLOSED · 62
Every member ends in a review, an exception with an expiry, or a fix.
1.3SEGMENTS

All identity risks monitored.

A segment is a population you govern. Track mode watches it, control mode enforces it, and either can alert you the day it grows. Membership, exceptions and history stay on the record, so who held what and when is already written down.

Offboarded employees with still-active accessControl•Human•↑ 8.2%37identities18% reviewed7/37
Contractors past end date with live credentialsControl•Human•↓ 4.2%19identities43% reviewed9/21
Dormant service accounts with privileged accessControl•Non-human•↑ 1.9%411identities50% reviewed204/409
Inactive user accounts with admin privilegesControl•Human•↑ 2.8%12identities66% reviewed8/12
Admins without MFATrack•Human•↓ 2.0%4identities80% reviewed4/5
Offboarded employees with still-active accessControl•Human•↑ 8.2%37identities18% reviewed7/37
Contractors past end date with live credentialsControl•Human•↓ 4.2%19identities43% reviewed9/21
Dormant service accounts with privileged accessControl•Non-human•↑ 1.9%411identities50% reviewed204/409
Inactive user accounts with admin privilegesControl•Human•↑ 2.8%12identities66% reviewed8/12
Admins without MFATrack•Human•↓ 2.0%4identities80% reviewed4/5
Avantia Law
“Ploy has transformed how we do access requests & we wouldn't be able to go back to the way it was.”
Peter F.Head of IT & Infosec, Avantia Law
Read the story
Liberis
“Ploy has enabled us to completely automate employee onboarding and offboarding, saving us 150 manual actions, clicks, and hours of time per employee.”
Paul HartHead of IT, Liberis
Welcome to the Jungle
“With Ploy, we've turned a tedious weekly task into easy automated flows. We're saving half a day a week and have completely streamlined onboarding across all our SaaS tools. Total game changer.”
Devon BrownSenior IT Engineer, Welcome to the Jungle
Luno
“Ploy saved me from drowning in spreadsheets, manual licence assignment and SaaS sprawl. It lets us easily make sense of what's being bought, used, and wasted which is more than I can say for most software tools. The best part? They listen, iterate fast, and don't take themselves too seriously. Perfect match.”
Simon FishleyGlobal IT Director, Luno
Read the story

Find your riskiest identities.