Security Posture Assessment

A security posture assessment is a structured evaluation of an organization's security controls and configurations that produces a scored picture of how well it can prevent, detect, and respond to threats.

A posture assessment reviews real configuration — firewall rules, identity and access policies, email authentication, cloud IAM, endpoint settings — against recognized control frameworks, then scores each domain and surfaces prioritized findings with remediation steps.

Unlike a one-time penetration test, a posture assessment is about the standing state of your defenses: what is configured, what is missing, and what to fix first. Vigil scores posture from 0–100 (letter grade A–F) across seven domains — Identity, Network, Endpoint, Email, Cloud, Data Protection, and Monitoring — and maps every finding to NIST CSF 2.0, CIS Controls v8, and MITRE ATT&CK.