Aid+ Open Beta

Containment Aid+

The paywall is removed for now while the tools are being finished. Use the workspace below to open the assessments and platform workflows directly.

Aid+ purchase gating is temporarily disabled while the platforms are being completed.
Operations Console

Containment Aid+ workspace

2 Open workflows
18 Bulk actions tracked
6 Evidence tasks

Assigned workflows

Live
Platform Scenario Status Lead
Azure and M365 Mass compromise In review IR Lead
Okta Session abuse Ready Identity Team
Salesforce Suspicious export Queued SaaS Admin

Owned tools

Access
Azure and M365 Containment Check Review Entra ID, Azure and Microsoft 365 containment actions for both targeted and mass compromise scenarios, including bulk user scoping, service principals, consent abuse, legacy auth, mailbox abuse and audit evidence. Okta Containment Check Review Okta containment actions for both single-user and mass compromise scenarios, including bulk user scoping, session revocation, MFA, admin role abuse, suspicious apps, OAuth grants, network zones and System Log evidence. Salesforce Containment Check Review Salesforce containment actions for both single-user and tenant-scale incidents, including bulk user scoping, session revocation, connected apps, OAuth, audit trails, Event Monitoring, jobs and export evidence.

Recommended workflow

Runbook
  1. Select platform and scenario
  2. Track bulk containment actions
  3. Review evidence and logging
  4. Export response pack
Overview

What Containment Aid+ covers

Premium containment and mass-compromise review delivery for Azure/M365, Okta and Salesforce environments.

Paid Aid+ platform. The first 4 hours are free for triage and scoping; deeper investigation, reporting and workflow design are paid.

  • Azure and M365 Containment Check
  • Okta Containment Check
  • Salesforce Containment Check
  • Mass-compromise workflow design and reporting
Best fit

Where this platform helps most

  • Tenant-scale identity incidents
  • M&A and inherited identity estates
  • IR readiness improvement work
  • SMBs that need a practical containment model before a crisis
Delivery Workflow

How the platform engagement runs.

1

Select the affected identity platform

2

Assess bulk containment and evidence workflows

3

Validate high-risk escalation steps and logging

4

Export a premium response plan and backlog

Choose Your Workflow

Select the tool or assessment flow you need.

Containment Aid+

Azure and M365 Containment Check

Review Entra ID, Azure and Microsoft 365 containment actions for both targeted and mass compromise scenarios, including bulk user scoping, service principals, consent abuse, legacy auth, mailbox abuse and audit evidence.

Open Assessment
Containment Aid+

Okta Containment Check

Review Okta containment actions for both single-user and mass compromise scenarios, including bulk user scoping, session revocation, MFA, admin role abuse, suspicious apps, OAuth grants, network zones and System Log evidence.

Open Assessment
Containment Aid+

Salesforce Containment Check

Review Salesforce containment actions for both single-user and tenant-scale incidents, including bulk user scoping, session revocation, connected apps, OAuth, audit trails, Event Monitoring, jobs and export evidence.

Open Assessment
Expected Outputs

What you get from Containment Aid+

  • Containment readiness review
  • Tenant-scale incident action plan
  • Evidence export checklist
  • Executive and technical response outputs

Aid+ profit supports free SMB services and the goal of funding managed security services for SMBs over time.

Request platform access

Use the form below to ask about Containment Aid+, premium delivery, the free 4-hour advisory starter, or a tailored scope for your environment.