Stay secure · Identity and access

Stop a stolen password becoming a breach.

Most attacks start with a login. We help your people stop reusing passwords, give them one secure way into every app, and move you towards passkeys, without making work harder.

What you get

01

No more password reuse

Everyone gets a vault for unique, strong credentials, with shared vaults for team accounts, all behind one master password.

02

One secure way in

Single sign-on gives people one-click access to every app, with multi-factor authentication and role-based access behind it.

03

Access that follows your team

Accounts are created and removed as people join, move and leave, so former staff never keep a way in.

What is included

  • 1Password Business: rollout, vault design and shared vaults
  • Reports on weak, reused and exposed passwords
  • OneLogin single sign-on across your cloud apps
  • Multi-factor authentication policies
  • Role-based access and least-privilege admin rights
  • Automated provisioning and deprovisioning from your directory
  • Passkey readiness review and phased adoption
  • Ongoing administration and user support

Who it is for

Organisations with dozens of cloud apps, shared logins or staff who reuse passwords, and anyone asked by clients or insurers to prove access control for Cyber Essentials or ISO 27001.

How it works

  1. 1

    Assess

    We map your apps, accounts and how people sign in today, and find the riskiest gaps.

  2. 2

    Design

    We agree vaults, access roles and sign-in policies that fit how your teams work.

  3. 3

    Roll out

    We deploy in stages with training, so nobody is locked out and adoption sticks.

  4. 4

    Run

    We manage joiners, leavers, policies and support, and report on progress.

Assurix Trusted MSP trustmark

Independently verified, continuously.

ISO 27001 certified since 2016, Cyber Essentials Plus, CREST-certified testers and an Assurix Trusted MSP.

See how we are verified

Questions we are often asked

What is a passkey?

A passkey replaces a password with a cryptographic key stored on your device and unlocked with your fingerprint, face or PIN. There is nothing to remember, reuse or type into a fake login page, so passkeys resist phishing and credential theft.

Do we need both a password manager and single sign-on?

Often, yes. Single sign-on covers the apps that support it; a password manager safely handles everything else, including shared and legacy accounts. We will recommend the mix that fits your apps.

Will this help with Cyber Essentials and ISO 27001?

Yes. Both expect strong authentication, multi-factor authentication and proper control of user accounts. Identity and access management gives you the controls and the evidence.

Talk to us.

A short, no-obligation conversation about what this would look like for your organisation.

Cookie settings

Necessary

Keep the site working and remember your choices. Always on.

Our enquiry forms (Pipedrive), YouTube videos and certification widgets (BlockMark, SecurityScorecard). These services may set their own cookies.