Guardian by RiskA: Microsoft security score portal

Overview

Guardian is RiskA's portal for showing a business how secure its Microsoft environment is. A customer signs in, links their Microsoft tenant, and sees an identity score, a 90-day trend and plain-language recommendations, with a checklist to track each fix. RiskA's admins onboard customers and can open a customer's view to help them. We built the web app and the API behind it.

The challenge

The raw Microsoft security data is long and technical. The portal has to read it with the customer's permission, keep that permission valid without asking again, and show only what the customer needs to act on, while admins and customers see different things.

What we built

1. A customer dashboard with an identity score and a 90-day Secure Score trend chart
2. Security health insights with resolution steps for each recommendation
3. A security checklist with a status per item for each customer
4. A flow for linking a customer's Microsoft tenant, with automatic refresh of the access tokens
5. An admin console to onboard customers, view their dashboards and open their view for support
6. Sign-in and roles (admin and customer) with Auth0
7. Account emails from branded templates
8. Containerised front end and API for deployment
9. Dashboard counters for active users and open findings