The audit provides forensic-grade evidence to support GDPR Article 32 requirements and Cyber Essentials assessments. It identifies credential exposures, API tokens, SSH keys, browser password stores, developer debris, and persistence mechanisms that traditional RMM and EDR tools do not detect. The audit also includes full USB device forensics, showing every storage device ever connected to the endpoint, along with timestamps and usage patterns. Any USB activity outside normal working hours is highlighted — helping identify potential data exfiltration, insider-threat behaviour, and unauthorised personal devices. This gives MSPs clear, defensible evidence for GDPR compliance, HR investigations, incident response, and zero-trust endpoint reviews — all without installing agents, without cloud access, and without modifying the system.

This audit tool is built on proprietary, patent-pending methods for detecting credential exposures, persistence mechanisms, and USB device activity. Unlike open-source scripts or generic scanners, the audit uses a protected approach to identify risks that traditional RMM and EDR platforms cannot see. The patent-pending engine is fully offline, agentless, and read-only, making it suitable for GDPR, Cyber Essentials, and regulated environments where data cannot leave the endpoint. This gives MSPs a unique, defensible audit process they can rely on for compliance reporting, incident response, and client assurance.

The audit provides a complete forensic history of every USB storage device ever connected to the endpoint. This includes device names, vendor IDs, serial numbers, timestamps, and repeated usage patterns. Any USB activity outside normal working hours is automatically highlighted, helping identify potential data exfiltration, insider-threat behaviour, staff misuse, and unauthorised personal devices. This gives MSPs clear, defensible evidence for GDPR compliance, HR investigations, Cyber Essentials assessments, and zero-trust endpoint reviews. The audit runs fully offline, requires no agents, and does not modify the system, making it suitable for restricted environments.

Your security stack is blind to this — Stratum isn't.

If a client suffers a breach, this is the forensic evidence you'll wish you had.

One endpoint can expose an entire organisation — audit it before someone else does.

Find the credential leaks, SSH keys, and backdoors your RMM and EDR silently miss.

Catch late-night USB activity, rogue devices, and insider-threat behaviour in seconds.

Turn every scan into a billable security audit — MSPs resell findings for £500–£1,500 per endpoint.

Designed for zero-trust environments — no installation, no footprint, no network access.

Patent-pending forensic technology trusted by MSPs who need defensible results.

No other tool combines offline, read-only, agentless auditing with this depth of exposure detection.

Your clients assume you can see everything — this proves you actually can.