Explained
module by module.
Three engines, one workflow. Retrievy unifies cloud posture, identity posture, and configuration management under a single Hardening Kanban, so the next action is always obvious. Every finding ships with vendor-grade remediation guidance.
The Retrievy platform. Score, modules, recent findings, all in one view.
Easy to deploy. Easy to triage.
Easy to fix.
Three steps, one workflow. The journey from "we just connected" to "this is fixed and verified" is built into the platform.
Five minutes,
not five days.
A signed Windows MSI (~40 MB, single-file .NET 8) or a Docker container. Pair with a one-time install token. Outbound HTTPS only, no inbound ports, no Domain Admin, no write privilege. Auto-updating thereafter.
The math
sorts it out.
The Retrievy Score Engine uses asymptotic decay so binge-fixing a hundred Lows can't outweigh ignoring one Critical. Severity-weighted SLAs (48 h to 90 d). Risk-accepted findings stay transparent without polluting the metric.
Vendor-grade
guidance, inline.
Every finding ships with a "What this validates" description, copy-paste CLI examples, GUI navigation paths (FortiOS, Microsoft Learn), and direct vendor documentation links. Surfaced inline on the finding card, not buried in a knowledge base.
One platform,
four lenses on your posture.
Cloud Security Posture Management
Continuous audits across AWS, Azure, GCP, OCI, and Cloudflare. Live NIST CSF / CIS / MITRE mapping derived per finding. Asymptotic-decay scoring with exception-aware SLAs.
Identity Security Posture Management
One graph for every identity, across cloud (AWS, Azure / Entra, GCP, OCI, Cloudflare, M365), Active Directory, and FortiGate. Identity X-Ray maps the real attack paths to Tier 0, names the shadow admins who reach it, and rolls your whole identity surface into one score.
Active Directory Configuration Audit
GPO X-Ray with LSDOU-compliant precedence resolution and per-policy blast radius. ADMX ingestion, 55 CIS Windows hardening checks, AdminSDHolder watch, and tactical drift detection.
FortiGate Configuration & Policy X-Ray
45 Layer-7 efficacy checks across SSL, AV, IPS, AppControl, WebFilter, DNS, DLP. 28 admin-plane CIS checks. Policy X-Ray with the Domino Effect propagation and a Hygiene Engine for zombie rules.
Multi-Tenant for MSSPs & Consultants
Run every client from one login with cross-tenant triage, while each client keeps an isolated database, their own dashboards, and their own score. MSSP Elite adds a White-Label portal and quote-based sizing for your roster.
One engine.
Every finding.
CSPM, ISPM, and SCM each surface their own findings, but every finding flows through the same scoring, framework mapping, exception, SLA and trend engines. One source of truth, one math, one compliance lens.
Asymptotic decay scoring.
Penalties: Critical=100 · High=20 · Medium=5 · Low=1. The score asymptotes toward zero rather than stepping. Binge-fixing a hundred Lows can't outweigh ignoring one Critical.
NIST CSF, CIS Controls, MITRE ATT&CK, derived per finding.
Mappings come from the finding payload at query time. When framework taxonomies update, Retrievy reflects the change without a migration. 100+ MITRE techniques covered.
Risk-accepted, not hidden.
Exceptions suppress the penalty but never the finding. Visible in a transparency bucket with expiry dates.
Built-in remediation windows.
- Critical · 48 h
- High · 168 h
- Medium · 720 h
- Low · 2160 h
Trend lines per severity, per module.
Every day, the engine snapshots posture per severity and per module. Stakeholders see the curve, not just today's count. Proof your investment is paying down.
Discover.
Score. Harden.
Discover
Cloud connectors and lightweight agents collect findings across every plane (public cloud, identity, on-prem network) into one normalized model.
Score
The Retrievy Score Engine assigns severity-weighted penalties through asymptotic decay, with exception-aware suppression. One number, every dashboard, every module.
Harden
Findings flow into the Hardening Kanban with vendor-grade fix guidance. Status transitions are scan-verified, so only the next scan can promote a finding to "Resolved".
See your posture
in under five minutes.
No phone call gauntlet. Connect a cloud provider, install the agent, or both, and see your first scored posture the same day.
Try everything free for 14 days on your own data. Request your trial code. No credit card required.