Ensure PosturePass Compliance Verification System
Автор: Ensure Endpoint Technologies Inc.
Ensure secures Windows 365/Entra access by enforcing compliance checks on unmanaged devices.
PosturePass extends Microsoft Conditional Access to contractor, partner, and external devices, without touching your existing Entra ID setup.
A lightweight agent installs in seconds, verifies device compliance, and integrates natively with Microsoft Entra ID, so your existing Conditional Access policy covers every device in your environment. No MDM enrollment, no VPN, no policy changes required.
The devices your Microsoft environment doesn't know about
Contractors work from devices your organization doesn't own, can't enroll, and — without PosturePass — can't see.
Microsoft manages the Cloud PC and the Conditional Access policy. But if the contractor's physical laptop is unmanaged and unregistered, your Microsoft environment has no way to determine whether it's encrypted, patched, or safe. That gap is the problem PosturePass solves.
How PosturePass works
PosturePass runs on Windows and macOS.
It installs via a simple link. No admin rights, no VPN, no IT involvement required. It checks encryption, antivirus, firewall, OS version, password policy, remote access software, and more, then integrates natively with Microsoft Entra ID via the Graph API.
Your existing Conditional Access policies apply, and organizations retain full control over what access rules govern external devices, with no architecture changes required.
If a device fails a check, the contractor sees exactly what needs to be fixed and resolves it themselves. No helpdesk ticket. No IT intervention.
Works with your existing Microsoft environment
Two common patterns:
Securing Windows 365 or Azure Virtual Desktop. PosturePass checks the physical laptop before the session starts and keeps checking while it runs. Windows 365 gives contractors the desktop. PosturePass checks the device used to enter it.
Enabling direct M365 access. When contractors only need Teams, Outlook, SharePoint, or browser-based apps, PosturePass verifies the device directly and removes the need for virtual desktop infrastructure for that population.
Built for fast deployment, minimal footprint
Nothing needs to be configured on the network side, nothing is installed centrally, and nothing touches your existing device management environment. When your organization is ready to move, PosturePass is ready.
Privacy by design
PosturePass checks device security status, and nothing else.
No files, no browsing data, no personal information is accessed or transmitted.
Built for compliance-sensitive environments in finance, insurance, and healthcare.
Get started
Built for IT security teams, security architects, and MSPs running M365 environments with external user populations.
If contractor or partner devices are an open variable in your Conditional Access deployment, PosturePass closes it, without new infrastructure, without disrupting existing workflows, and without asking contractors to do anything more than click a link.12