Skip to content
ECZ‑IDfor MSPs & MSSPs

For accepted partners

£395 Client-Estate Machine Trust Audit

Accepted partners begin with a £395 Client-Estate Machine Trust Audit. It is the first working step of the relationship, not a report you buy and file.

It is deliberately not the first thing we sell. A fixed-price audit is the right way to start a working relationship and the wrong way to make a strategic decision, so it sits after acceptance rather than in front of it.

Deliverable

What you receive

Not “an assessment”. A named, substantive set of artefacts, each of which is a real object in the product rather than a section of a document.

  1. 01An estate baseline covering the client environments in scope.
  2. 02A populated Machine Trust Register — the machine actors found, named.
  3. 03Native identity references where the evidence supports them.
  4. 04The MCP, API and action surfaces those actors reach.
  5. 05A Customer Authority assessment for each environment examined.
  6. 06Attention Required findings, classified and prioritised.
  7. 07Your first Client Machine Trust Evidence Pack.
  8. 08Written recommendations that are implementable without ECZ-ID.
  9. 09An activation recommendation — including, where it applies, that you should not activate.

What it is not

The audit produces findings, classifications and priorities. It does not produce a score or a grade, and it is not a compliance certification, a penetration test or a legal opinion.

The recommendations are written to be implementable without ECZ-ID. Where a finding does not need us, the report says so. An audit that can only conclude “buy the product” is a sales document wearing a report’s clothes.

Method

How it is run

Read-only and disclosure-based

Read-only and disclosure-based: written responses, screenshots and exports. No credentials are handled, no tooling is installed, and no access to your systems or your clients' systems is required at any point.

Asynchronous by default

Entirely asynchronous — no meetings required. Written delivery with written follow-up questions answered. A call is available if you would prefer one, but nothing in the audit depends on scheduling.

Sampling, stated

The report states which client environments were examined and how deeply. Findings are not extrapolated beyond the stated sample, and the sample is written into the report rather than left implicit — so you can see exactly what the conclusions rest on.

How to get here

The audit follows acceptance

There is no buy button on this page. The audit is the first working step after an application is accepted, so the route to it runs through the programme rather than through a checkout.

Already accepted and looking for your audit link? It is sent directly to you, and it opens a prefilled order review rather than a payment page — you see the scope and the price before anything is charged. If you have lost it, sign in at partner sign-in or reply to your acceptance email.