Fast-growing companies rarely get to stop and rebuild their IT. Madhive was hiring quickly, supporting a hybrid workforce, and as a SaaS company it had to meet SOC 1, 2, and 3 requirements on every device. When Madhive brought in Advisory in 2021, its device management could no longer keep up. It needed a true zero-touch setup for new hires and a consistent security baseline across the fleet.
Every year after that brought a new kind of complexity. An acquisition added roughly 350 people to support almost overnight. New business units arrived with their own systems. As Madhive matured, its customers, auditors and leadership expected more of its security, at a time when employees were adopting new SaaS and AI tools faster than any policy could follow.
Audit and foundation
We started with a full audit of Madhive’s systems, security and IT strategy. We then built a zero-touch deployment on Jamf Pro and security baselines that met SOC 2 requirements, strengthened with CIS benchmarks. We moved Madhive to Jamf Protect for endpoint security and automated onboarding and offboarding through Google Workspace.
Layered security
As the company grew, we added managed detection and response and DNS-layer protection to the endpoint stack. We also put a process in place to find and fix devices that had stopped checking in with management.
Integrating an acquisition at scale
it added roughly 350 people who ran on a separate and less mature set of tools: a different identity and device platform, a separate Microsoft 365 tenant and several Slack workspaces. We ran the integration on a Day 1, 30, 45 and 100 plan:
- Day 1: all 355 incoming users were created and staged in Madhive’s Okta tenant, with self-service password reset and access to the core collaboration tools.
- Day 30: a discovery and audit of the acquired environment, including a 346-machine fleet in which about 70% of devices were past Madhive’s replacement policy.
- Day 45: a prioritized roadmap and proposal.
- Day 100: devices moved onto Jamf and Intune in staged rings; groups moved from the old identity provider into Okta; Slack and Google Workspace data consolidated; the acquired Microsoft 365 tenant shut down; and hardware replacement coordinated across offices, including outside the US.
Governance for a maturing company
With the integration complete, the focus moved from absorbing growth to controlling it:
- Okta Identity Governance, so access requests and approvals run through a governed workflow.
- A role-based access model tied to HR data, so app access and licenses follow department and division.
- A 1Password rollout to more than 150 users.
- Cloudflare DNS filtering on every endpoint, and Admin By Request to manage local admin rights.
- [CONFIRM: device trust is fully enforced, so only approved Madhive machines can reach company apps]
- Audits of the Google Workspace tenants used by additional business units.
- Patch compliance for Chrome, Zoom, Slack and Teams held between 95% and 100% across Mac and Windows from May to July 2025.
A full security audit and remediation
Over the following months we deployed CloudAlly backup and context-aware access, cut session lengths to 16 hours, tightened admin roles, enabled malware sandboxing, reorganized the account structure and cleaned up stale accounts left over from the acquisition. Every agreed item was closed out in September 2026. We also extended Cloudflare protection to cloud apps.
- Compliance across all devices within 45 days of the original Jamf build.
- An acquisition of roughly 350 people absorbed on a structured 100-day plan, with every incoming user ready in Okta before Day 1.
- Patch compliance of 95 to 100% on core apps across Mac and Windows.
- A security posture that kept pace with the business: access governance, least privilege, DNS filtering, backup and SaaS controls, each added when Madhive’s growth called for it.
- A three-year renewal in 2026, the longest contract renewal in Advisory’s history.
- [OPTIONAL: licenses reclaimed or annual savings realized from the 2026 audit]