Answers for scope, access, data, and reports.

It runs an Okta assessment and turns configuration, evidence, alerting, and licensing signals into findings and reports.

Start with an assessment scoping call. We align org count, reporting needs, evidence requirements, alert coverage questions, licensing review needs, and delivery model.

Yes. The demo at demo.atomation.io is open without signup. Click through findings, evidence, and reports without connecting your own Okta tenant.

Yes. The current public product focus is Okta Assessment.

Routine assessment calls do not manage users, groups, policies, apps, or settings, and Atomation does not auto-remediate findings. Setup is separate: it creates or configures the Atomation API Services app, assigns its role and grants, and must revoke the temporary setup token before succeeding.

The permanent API Services app currently has Super Administrator and 31 approved read grants plus okta.appGrants.manage. Routine scan tokens request only the reads. Okta's management scope is not self-only; Atomation reserves it for a future reviewed workflow targeting the configured connector app. The temporary Super Admin SSWS token inherits full privileges while active, is not stored, and must be revoked before setup succeeds.

No. Current finding and report paths are deterministic and do not require an external AI service. Customer identity data is not sent to third-party AI tools for report generation.

Reports can include an executive summary, prioritized findings, evidence references, framework mapping, customer-supplied alert-coverage context, and licensing signals. The active portal exports reports as PDF or Markdown and supported inventory views as CSV.

Yes. Findings can be organized around framework lenses such as HIPAA, SOX ITGC, SOC 2, GLBA/FFIEC, ISO 27001, PCI DSS, CIS Controls v8, NIST 800-53, and customer-provided controls when the engagement requires it.

The current portal supports on-demand scans and a later manual follow-up assessment. Automated scheduling, drift comparison, trend reporting, and enforced retention tiers are roadmap capabilities, not current production features.

Atomation is veteran-owned and hands-on. You work directly with the product and assessment owner, not a generic ticket queue.

Based in the Tampa Bay area. Serving Hillsborough, Pinellas, Pasco, and remote clients across the U.S.