SquareVertex.AI×Ploy
Partners · SquareVertex × Ploy

Identity automation, delivered locally

SquareVertex is Ploy's partner in the Western Balkans. We start with a free, read-only scan of your identity estate or service desk, then turn the findings into a plan — and deliver it, from our offices in Tirana, Prishtina and Skopje.

Read-only No agent to deploy Revoke any time The report is yours to keep
Why this partnership

Your IdP shows you what's connected. We show you the rest.

Most organisations know what is connected to Okta, Entra ID or Google Workspace. Far fewer know what sits outside it: apps reached without single sign-on, service accounts nobody owns, guests nobody reviews and leavers who still hold access. Access requests quietly eat service-desk time while people wait.

Ploy finds this quickly and safely. SquareVertex turns what it finds into a prioritised plan and does the work: IAM assessment and strategy, remediation, Ploy implementation, training and local support — under one contract, with a team in your time zone.

What SquareVertex brings

  • A local team in Tirana, Prishtina and Skopje that runs the scan with you and walks you through the results
  • Our IAM practice: assessment & strategy, MFA & passwordless, IGA, PAM and Zero Trust
  • Regulated-sector experience: NIS2, DORA, ISO 27001, Albania's Law 17/2023 and audit evidence
  • Ploy implementation, training and first-line support once you go live
  • Joint bids with Ploy for public-sector and regulated tenders
In 60 seconds

Identity risk hides in plain sight

The Identity Risk Scan looks across Okta, Entra ID or Google Workspace, from admin roles and service accounts to group sprawl and dormant access.

Captions available. The numbers come from an illustrative Ploy profile, not a customer.

214applications reached outside single sign-on
185non-human identities with no named owner
388dormant guest accounts, none with MFA
9,140live access grants held by people who have left

Illustrative profile published by Ploy, not a customer's data or an average. A real scan reports your own findings.

Scan 01 · Identity Risk Scan

A read-only review of identity and access exposure

Around Okta, Entra ID or Google Workspace. Nothing is exploited and nothing is changed: no agent, no write access and no changes to policies or groups.

Apps outside SSO

Apps your IdP reveals, and those reached without it.

Admin roles

Standing privileged access, including external suppliers.

Non-human identities

Service accounts, their owners, and credential age and rotation.

Guests & MFA

Dormant external accounts and their MFA enrolment.

Leavers & inactive

Live grants held by people who have left or gone quiet.

Disabled but active

Accounts marked disabled that still show sign-ins.

Group sprawl

Overlapping admin groups and groups with no description.

Dormant grants

Access that is still held but no longer used.

Findings ranked by time to act

Every finding covers what it is, why it matters, what to do and who should own it — rated Critical (act within days), High (within weeks), Medium (this quarter) or Low (housekeeping). Closed risks keep their ID, so progress is easy to show an auditor.

You receive: urgency-rated findings · a risk register with stable IDs and named owners · a dated 30/60/90-day plan, walked through live with your team.
IDUrgencyExample finding
R-1.1CriticalExternal supplier holds permanent standing tenant admin rights, with no time limit or shared audit trail
R-3.1Critical185 of 212 service accounts have no named owner; 81 hold credentials past their rotation date
R-4.1Critical47 disabled accounts show sign-in activity, 8 of them within the last week
R-4.2High612 inactive accounts hold 9,140 active grants; offboarding doesn't consistently revoke them

Example risk-register entries (illustrative).

How it works

Light on your team, heavy on evidence

Both scans take one person one sitting to connect. You can revoke access at any time.

Identity Risk Scan · about three weeks

1 · About 10 minutes

Connect

Read-only access to your identity provider: Okta, Entra ID or Google Workspace. One person, one sitting.

You, with your SquareVertex team
2 · About three weeks

Observe

A snapshot shows today's state; watching for a few weeks shows access building up, credentials ageing and accounts going quiet.

Ploy
3 · Live walkthrough

Review

Findings rated by urgency, a risk register and a 30/60/90-day plan, walked through with your team rather than sent as a PDF.

Ploy and SquareVertex, with you

ITSM Access Request Scan · 48 hours

1 · About 5 minutes

Connect

Authorise Ploy against your service desk using read-only OAuth. There is no agent to deploy, and your ticket flow does not change.

You, with your SquareVertex team
2 · Runs overnight

Read

Ploy's agent pulls 12 months of tickets and classifies each one by request type, system, requester, approver, provisioner and time taken.

Ploy
3 · Within 48 hours

Report

You get the analysis back and we walk you through it: volume, automatable share, wait times and total cost.

Ploy and SquareVertex, with you
Scan 02 · ITSM Access Request Scan

Understand where your IT team's time goes

Every access request costs twice: once in IT effort, and again in the time people spend waiting. The scan reads 12 months of service-desk access requests and returns a costed analysis within 48 hours.

Volume & trend

Requests per month across the last year, with the trend forecast forward.

When requests land

Every access request of the last 12 months, mapped by weekday and hour raised.

Automatable from day one

Each request type cross-referenced against your IdP and the systems Ploy already connects to.

Time to access

How long people wait for access, and where the waiting happens.

IT effort in FTEs

The fulfilment workload expressed as full-time equivalents.

The annual cost

The combined yearly cost of IT effort and of waiting time.

Putting a number on it

In Ploy's illustrative model for a 1,000-person organisation, access requests cost between £142,500 (conservative, 2.85 FTE) and £173,750 (current trajectory, 3.48 FTE) a year in IT effort and waiting time.

Illustrative model published by Ploy, not a customer's data or an average. A real scan replaces these with your own numbers.

A strong fit when…

  • Access requests are a growing share of service-desk volume
  • Joiners wait days for the tools they need
  • IT can't say how much time access work really takes
  • You are building a business case for access automation or IGA
  • You need audit evidence of who approves and provisions access
From scan to secure

One partner from the first scan to go-live

Every engagement starts with a scan that costs you almost no effort and gives both of us hard data to scope the next step.

Free scan

ITSM or Identity Risk Scan, run with you and walked through by our team.

First conversation

IAM Assessment & Strategy

The scan's findings feed a prioritised IAM roadmap.

After the walkthrough

Remediation

Fix the findings: guests, leavers, service-account owners, apps outside SSO.

From the risk register

Ploy implementation

Deploy and configure Ploy, connect your IdP and service desk, build access workflows.

When you choose Ploy

Training & support

Admin and end-user training, local first-line support and health checks.

After go-live

Public sector and regulated tenders

For tenders in Kosovo, Albania and the wider Western Balkans, SquareVertex bids as prime contractor with local delivery, and Ploy as the technology partner — with ready answers on security and data residency.

Talk to us about a tender
Questions

Frequently asked

Is the scan really free?

Yes. There is no charge and no obligation, and the report is yours whether or not you go further.

What access do you need?

Read-only access to your identity provider (for the Identity Risk Scan) or read-only OAuth to your service desk (for the ITSM Scan). Nothing is installed, nothing is changed, and you can revoke access at any time.

Which platforms are supported?

The Identity Risk Scan covers Okta, Microsoft Entra ID and Google Workspace. For the ITSM Scan, tell us which service desk you use and we'll confirm it before we start.

Do we have to buy Ploy afterwards?

No. Many organisations use the findings to run an IAM assessment or fix issues with the tools they already have. If Ploy is the right fit, we implement and support it locally.

Technology ecosystem

Our wider partner network

Best-of-breed and vendor-neutral: we bring partner technology where it makes the difference.

Ploy
Oligo Security
Lansweeper
Black Duck
CredShields
Wazuh
SAP
Hetzner
AWS
Microsoft Azure
LiteLLM

Book your scan

Ten minutes to connect. A walkthrough of your own findings with our team in Tirana, Prishtina or Skopje.