Skip to main content
A Risk Assessment covers everything in an External Assessment and adds what only an agent inside the network can see: internal vulnerabilities, sensitive data on devices, saved browser credentials, and cloud accounts. Setup takes under an hour, and the scan usually finishes about 24 hours after the agents are deployed.

​
Choose the assessment type

Select Create Assessment in the top right of the portal. The picker shows a card for each assessment type with its setup time, typical scan duration, and what it includes:
  • External Assessment: dark web monitoring, an external network vulnerability scan, DNS evaluation, and a website vulnerability check. No agent needed.
  • Risk Assessment: a full External Assessment plus internal vulnerability analysis, sensitive data identification, and browser credential analysis, as a one-time snapshot. See demo opens a sample assessment with example data.
  • Monitored Risk Assessment: a full Risk Assessment with continuous monitoring, risk-change alerts, recurring scans, and remediation workflows. This card only appears for users who can manage Unity subscriptions.
The line above each card’s Select button says whether you can use it:

​
Create the assessment

1

Pick the account and user (multi-account admins only)

If you manage more than one account, Telivy first asks which account and user to create the assessment under.
2

Enter the company details

Company Name and Domain are required. If the company has no domain, tick Skip domain for external scan. Telivy records nodomain.local and runs the assessment without the external scan.Then set Industries, Country, Company Status (Prospect or Client), and the Anti Virus the company runs. The installation instructions change to match the antivirus you pick. If you pick ThreatLocker, Telivy notes that ThreatLocker blocks MSI-based auto-updates and turns off auto-update for the assessment. You can turn it back on later in the assessment settings.
3

Schedule recurring scans (clients only)

When Company Status is Client, a Recurring Scans section appears. Tick the box and choose a Scan Frequency to rescan automatically. Risk Monitoring explains what changes once monitoring is on.
4

Decide how PII is handled

Under Configure Compliance, Mask PII data keeps only masked evidence of the sensitive data Telivy finds. Turn it on for clients regulated under HIPAA. The box starts ticked if your agency’s default PII settings mask PII, and new assessments also take the agency’s default country, currency, and cost per match. Data Security explains what is stored with and without masking.
5

Create and set up

Select Create. You land on the assessment’s Setup tab, where you deploy the agent and connect Microsoft 365 or Google Workspace.
Allow the Telivy agent in the client’s antivirus or EDR before deploying it, or the scan may be blocked or quarantined. See Whitelist Telivy with AV/EDR.

​
Next steps

Install the Telivy agent

Deploy to Windows endpoints and start collecting data

Scanning schedule

How often each check in the assessment runs