Platform / Policy & Access
Baseline security policies and access controls, guided for small teams
Most small-company incidents involve weak access: a shared admin login, no multi-factor authentication or software installed with no review. PixelPrivate is planning guided baselines that turn these into checklists with owners and due dates, in plain language. This pillar is mostly roadmap and we say so.
Turn good intentions about passwords, admin rights and software into owned tasks.
Who it is for
Built for teams without a security department
- Companies where everyone has more access than they need because nobody has had time to tidy it up.
- Operations leads asked by an insurer or customer to confirm MFA and admin controls are in place.
- MSPs who want a consistent baseline to walk every client through.
Business outcomes
The business problem: weak access turns small mistakes into big incidents
Lower fraud and takeover risk
Stolen or reused passwords are a leading cause of account compromise. Requiring multi-factor authentication on email, finance and admin accounts is among the highest-value changes a small company can make.
Contained damage when something goes wrong
If everyone is a local administrator, one bad download can affect the whole machine. Limiting admin rights reduces how far a single mistake spreads.
Insurance and customer requirements met
Insurers frequently make MFA a condition of cover or a premium factor. Documenting that you require it, and who owns it, supports renewals.
Less downtime from unvetted software
A simple approval habit for new software and browser extensions avoids malware, licence trouble and tools that quietly expose data.
What you get
Capabilities and where each one stands today
Every item carries a status. Available means it is built and working today. New means it is being added now. Roadmap means planned and not yet built.
Plain-English security explanations today
AvailableThe grounded Copilot can explain access and email-related findings from your scans and suggest sensible next steps.
Monitoring and email alerts
AvailableAlerts on changes to your external posture help you notice when something related to access, such as an exposed login page, changes.
Baseline checklists with owners and due dates
RoadmapGuided baselines for MFA, admin rights and software approval, each assignable to a person with a deadline.
Policy templates
RoadmapEditable starter policies you can adopt and adapt, shared with the Trust and Compliance pillar.
Approve-by-email workflow
RoadmapA lightweight way to approve or deny software and access requests by replying to an email.
SaaS connections
RoadmapOptional read-only connections to common business apps to confirm settings such as MFA enforcement.
Roadmap items are not available yet. They are shown so you can judge fit honestly. Nothing marked Roadmap should be read as a working feature, a certification or a detection capability.
How it works
How Policy & Access works
- 1
Choose a baseline
Start from a short list of controls for MFA, admin rights and software approval, written for non-specialists.
- 2
Assign owners and dates
Each item gets a named person and a due date so it does not stay a good intention.
- 3
Approve exceptions simply
The planned approve-by-email flow keeps a record of decisions without a heavy tool or an agent on every device.
- 4
Review regularly
Re-open the checklist on a schedule so the baseline reflects how the company works now.
Honest limits
What Policy & Access does not do
- There is no endpoint agent. PixelPrivate does not install on laptops, block applications, enforce allowlists or control devices.
- Checklists are guidance and self-attested. PixelPrivate does not verify what is actually configured inside your identity provider or devices unless a future connection is built and enabled.
- Baseline checklists, policy templates, approve-by-email and SaaS connections are roadmap items and are not available today.
- It does not provide 24/7 monitoring, response or approvals by a security operations team.
Compared with enterprise tools
Endpoint control products enforce application allowlisting and device policy through an agent on every machine, supported by round-the-clock approval teams, which suits organizations with the staff to run them. PixelPrivate is deliberately not an endpoint tool. Our direction is plain-language baselines and simple approvals for small teams, delivered without an agent, and most of it is still roadmap.
Frequently asked questions
Does PixelPrivate enforce policies on my computers?
No. There is no endpoint agent and no application control. The planned features are guidance, ownership tracking and lightweight approvals, not enforcement.
What can I use today in this area?
The grounded Copilot, monitoring, email alerts and shareable reports. The baseline checklists, templates, approve-by-email flow and SaaS connections are on the roadmap.
Why list roadmap items at all?
So you can see where we are heading and judge fit honestly. Each item is badged Roadmap until it is built, and we do not describe it as working before then.
Which controls matter most for a small company?
Multi-factor authentication on email and finance accounts, removing shared admin logins, keeping backups tested and reviewing new software are strong starting points. Our checklist guide covers them in more depth.
Related pillars
Tools, guides and pricing
Start with policy & access today
Run the free check on your domain, or start the 14-day trial of monitoring and alerts.
No credit card · Cancel anytime · Reverts to the Free plan automatically