Frequently asked questions

An evidence-led view of identities, resource permissions, sensitive-data indicators, and prioritized security findings. Explore the source behind a result, follow the recommended next steps, and see where coverage needs attention.

The report view can be printed or saved as a PDF when its required data is available.

Select “Request a sample survey” to discuss your sources and arrange assisted onboarding. Your administrator approves the scanner deployment, source permissions, and associated cloud costs before work begins.

A Sample survey gathers initial evidence within a bounded processing window, then continues automatically into a distinct Full survey. Volume, permissions, and provider response times affect completion.

The request itself needs no cloud access and starts no survey.

Detailed findings stay in your customer-hosted scanner database. Connector secrets stay in your customer-controlled secret store.

Requested details transit Theodolite encrypted and in memory for authorized viewing. Operational state and permitted run summaries may be retained centrally.

Supported scanning reads the sources you authorize. Installation creates the scanner’s own cloud resources; any permission to update that infrastructure is separate from access to your source data.

The loss engine is in validation, with an illustrative scenario on the homepage. Theodolite and its report use three measures: Typical year (annual P25–P75, including no-incident years), Bad year (1-in-100, annual P99), and Per incident (individual-incident P25–P75). Customer estimates require qualified evidence, an approved model, and completed validation; individual files, identities, and findings are not assigned dollar values.