Verify independent broker devices without MDM.
PosturePass checks each broker device and creates timestamped evidence. Brokers self-install on Windows, macOS or Linux.
What PosturePass makes possible
What one PosturePass check covers
Most agents work from BYOD devices accessing Microsoft 365 without MDM. PosturePass verifies posture at sign-in.
6 checks
at each broker sign-in
Verify the device, not the attestation
PosturePass checks encryption, patches, firewall and screen lock at sign-in, then every hour. Identity alone is no longer the only gate.
1-click
NYDFS evidence export
Produce audit evidence on demand
Every check writes a timestamped record. Export the device-control evidence examiners ask for, without chasing thousands of brokers.
About 5 min
average broker setup
Onboard brokers without MDM
Brokers install a lightweight check on their own device. Most self-remediate failed checks without a help-desk ticket.
Your situation
Common starting points
Compliance Officer
I need defensible evidence for the next NYDFS exam
Replace annual paper attestations with verification at sign-in, then every hour. Every login produces the device-control evidence Part 500 expects.
See the audit evidenceCISO / Security Architect
I need to verify devices I do not manage
Independent brokers touch nonpublic information from devices outside your control. PosturePass plugs into Entra Conditional Access.
See the architectureDistribution Leader
I need to onboard agents without slowing distribution
Self-enrollment removes the IT provisioning bottleneck. Brokers stay productive on their own device, on Windows, macOS or Linux.
See the workflowInsurance deployment
How a national carrier verifies 8,000+ broker devices without MDM.
Device verification at sign-in, then every hour, exportable evidence, no agent on the carrier's side. The same architecture that satisfies a state insurance examiner.
Read the case study6 checks
evaluated against the carrier's policy
8,000+
third-party devices verified per deployment
Three steps
How PosturePass verifies an broker device at login.
The broker signs in as they do today. PosturePass runs the check, posts the result to your access policy, and writes a tamper-evident record.
Broker signs in to the carrier portal
PosturePass checks the device during sign-in through Microsoft Entra ID or Okta. No corporate enrollment is required.
Device posture is verified in seconds
Encryption, antivirus, firewall, OS patch level and screen lock. Failed checks get guided steps before access is granted.
NYDFS evidence is logged automatically
Every check produces a timestamped record: broker, device, controls, result, remediation. Export anytime for examiners.
Regulatory mapping
NYDFS Part 500: where PosturePass fits.
Examiners ask how you enforce controls and what evidence you can produce. PosturePass covers the device-facing sections directly.
| Section | Requirement | What PosturePass documents |
|---|---|---|
| §500.7 | Access privileges | Device posture is verified at sign-in, then every hour. Access denied if the device fails policy. |
| §500.11 | Third-party security policy | Your policy is enforced at sign-in, then every hour. Evidence is created automatically. |
| §500.12 | Multi-factor authentication | Device posture is layered with your existing MFA through Conditional Access. |
| §500.13 | Asset inventory | Every verified broker device is recorded in an exportable inventory. |
| §500.17 | Annual attestation | Reports back your attestation across policy, enforcement, inventory and monitoring. |