CydentiCydenti
Free • No credit card • 27 minutes

Audit Flash — Your NIS2 Identity Posture Report in 27 Minutes.

Free. No credit card. No commitment. Connect up to 3 SaaS applications via read-only API. Cydenti delivers a complete identity posture snapshot — orphaned service accounts and API keys, permission drift, OAuth exposure, and NIS2 compliance gaps — in under 30 minutes.

No commitment•No credit card•Hosted in France•First report within a week

What the Audit Flash Discovers

A NIS2 identity posture audit starts with a real inventory: human and non-human accounts, orphaned API keys, OAuth exposure, and gaps mapped to NIS2 Article 21 / ANSSI ReCyF Objective 13. Cydenti Audit Flash connects up to 3 SaaS apps read-only, hosts analysis in France, and delivers a PDF with prioritized remediation recommendations — not a full certification, no credit card required.

A complete identity posture snapshot across your connected SaaS applications.

Orphaned Service Accounts & API Keys

Discover every user and service account that is no longer linked to an active person or process — contractors who left, projects that ended, applications that were decommissioned. These are your most exploitable credentials.

“28% of security incidents trace to account and permission failures (CESIN 2026)”

OAuth & Third-Party Exposure

Map every OAuth grant and third-party integration — who approved it, what permissions it has, when it was last used, and whether it’s still active. Most organizations have hundreds of these connections they’ve forgotten about.

NIS2 / ReCyF Compliance Gap Summary

Receive a structured gap analysis mapped to NIS2 Article 21 and ANSSI’s ReCyF Objective 13 — identity inventory, access control, orphaned credential exposure, and access recertification status.

Permission Drift Analysis

See which accounts have accumulated excessive permissions over time — the quiet accumulation of rights that were granted but never revoked. This is configuration drift, and it’s the most common identity risk in SaaS environments.

How It Works — 3 Steps

1

Connect

Connect up to 3 SaaS applications via read-only OAuth API. We support Microsoft 365, Google Workspace, Okta, Salesforce, Slack, GitHub, AWS, Azure, and 10+ more. Time: 5 minutes. No agents. No data ever leaves Europe.

2

Analyze

Cydenti’s AI engine maps every identity, permission, and access relationship across your connected applications. It identifies orphaned service accounts and API keys, excessive permissions, OAuth exposure, and NIS2 compliance gaps automatically. Time: Within a week.

3

Report

You receive a structured PDF identity posture report covering: total identity inventory (human + non-human), orphaned and dormant service account and API key list, OAuth integration exposure map, NIS2/ReCyF compliance gap summary, and prioritized remediation recommendations. Time: Within a week of connection.

What’s Included in the Free Audit Flash

Up to 3 SaaS connectors (read-only API)
Complete identity inventory — human and non-human accounts
Orphaned service account & API key discovery
OAuth and third-party integration exposure map
NIS2 / ReCyF Objective 13 gap summary
Permission drift analysis
PDF report delivered within a week
Sovereign EU hosting — data never leaves France
No commitment, no credit card, no agents

Not included in Audit Flash (available in Try & Buy POC):

Continuous monitoring (real-time)
Full ISPM across unlimited SaaS connectors
ITDR (threat detection)
SIEM/SOAR integrations
Dedicated onboarding call
Start My Free Audit Flash →

No commitment • No credit card • First report within a week

Why This Matters Now: NIS2 Enforcement — October 1, 2026

ANSSI’s ReCyF framework (Objective 13) requires every NIS2-regulated entity to maintain a complete identity inventory, conduct annual access recertification, and demonstrate continuous access control — covering both human users and non-human identities (service accounts, API keys, OAuth tokens, machine credentials).

The Audit Flash gives you a baseline report — the starting point for your NIS2 compliance journey — in under 30 minutes.

15,000+
French entities in scope for NIS2
Oct 1, 2026
Hard enforcement deadline
28%
of incidents caused by account management failures
€10M
or 2% of global turnover — max penalty
“Our NIS2 audit was approaching and we had zero identity posture documentation. Cydenti generated comprehensive evidence in under 48 hours.”

— CISO, Financial Services, 300 employees

“We had no CISO and no budget for a full identity platform. Cydenti was operational within a week and gave us a complete picture of our identity exposure.”

— IT Director, Industrial SMB, 120 employees

Frequently Asked Questions

What SaaS applications can I connect to the Audit Flash?
You can connect up to 3 of the following: Microsoft 365, Google Workspace, Okta, Salesforce, Slack, GitHub, GitLab, AWS, Microsoft Azure, Google Cloud Platform, Atlassian, ServiceNow, CrowdStrike, Splunk, Databricks, Zendesk, and Bitbucket.
Does Cydenti have access to my data?
No. Cydenti uses read-only OAuth APIs — we can see what exists and what has access, but we cannot read, modify, or export your data. All analysis data is hosted in France (OVHcloud / Scaleway).
How is the Audit Flash different from the Try & Buy POC?
The Audit Flash is a one-time snapshot report covering up to 3 SaaS applications. The Try & Buy POC (€490/month) gives you full platform access — unlimited connectors, real-time continuous monitoring, ITDR threat detection, SIEM/SOAR integrations, and dedicated onboarding — for one month with no annual commitment.
Is the Audit Flash really free?
Yes. No credit card required. No hidden fees. No automatic upgrade. After receiving your report, you decide if you want to upgrade to the Try & Buy POC — but there is zero obligation to do so.
Does the Audit Flash cover NIS2 compliance requirements?
The Audit Flash produces a gap summary mapped to NIS2 Article 21 and ANSSI’s ReCyF Objective 13. It is not a full compliance certification, but it gives you the identity posture baseline you need to understand your current gaps — and document them.
What is a Non-Human Identity (NHI)?
A Non-Human Identity (NHI) is any machine-based account, credential, or access token that operates without direct human involvement — service accounts, API keys, OAuth application tokens, CI/CD credentials, and machine certificates. For every employee in a typical organization, there are approximately 20 NHIs — most of which are unmonitored.
What happens during the Audit Flash — and what is in the report?
Three steps: (1) connect up to 3 SaaS apps via read-only OAuth API (~5 minutes, no agents); (2) the engine maps identities, permissions, and NIS2 gaps (page timing: within a week); (3) you receive a structured PDF covering total identity inventory (human + non-human), orphaned/dormant service accounts and API keys, OAuth exposure map, NIS2/ReCyF gap summary, and prioritized remediation recommendations. See also NHI security.
What happens after the report — does Cydenti replace PAM?
After the report is delivered, you decide — there is no automatic upgrade. Cydenti discovers, explains, and prioritises SaaS + NHI exposure, then hands remediation to your PAM/IAM teams and tools via the PDF’s prioritized recommendations. It is not a secrets vault, rotation engine, or JIT broker. For a full-platform month, see pricing / Try & Buy or ISPM.

Discover your blind spots within a week — for free.

No credit card. No commitment. No agents. Your identity posture report — covering orphaned service accounts and API keys, OAuth exposure, and NIS2 compliance gaps — delivered within a week.

No commitment•No credit card•Data hosted in France (EU)•Response within 24h
Audit Flash — Free NIS2 Identity Posture Report in 27 Minutes | Cydenti