Find what's misconfigured in your Workday security, and why it keeps happening.
A scored, prioritized review of your Workday Production tenant, built from read-only reports. Every finding comes with the people and groups affected and the steps to fix it in Workday.
See a sample report (PDF) →Choose your A.Y.M Sentinel audit
Both packages review your tenant and tell you what to fix. The Standard Audit also reviews how security is run, so the same problems don't come back.
| What you get | Security SnapshotPriced by sizeFrom $7,500About 2 weeks |
RecommendedStandard AuditPriced by sizeFrom $15,000About 3 weeks |
|---|---|---|
| Both packages | ||
| Scorecard rating nine security areas, with an overall score | ||
| Findings workbook: every issue, who it affects, and how to fix it in Workday | ||
| Executive report, readout deck and a readout meeting with your team | ||
| Approvals, segregation of duties, and administrator and implementer access | ||
| Who can see SSNs, medical, protected-class and I-9 data | ||
| Integrations, service accounts, reports and scheduled processes | ||
| How far your security has moved from Workday's defaults* | ||
| Standard Audit adds | ||
| Governance review: access reviews, change control, MFA, emergency access, sandboxes | ||
| Your team's answers checked against what the Workday data actually shows | ||
| Former workers who still hold security access | ||
| Security changes activated without a ticket or a second approver | ||
| Items to settle at the readout, so findings are agreed, not debated | ||
Your final price depends on company size and complexity: worker count, whether you run Financials, how many countries you operate in and how customized your security is. Prices are for one Production tenant and are confirmed in a fixed quote after your scoping call. Founding-client rates are available for a limited number of engagements this quarter. Ask on your scoping call. * Where a matching Workday baseline exists for your tenant's template.
Module review
Results broken out by Workday module, from Core HCM to Payroll and Financials.
Priced with your quoteRegulatory alignment
Findings mapped to the privacy laws and frameworks where you operate.
Priced with your quoteAI agent security review
For tenants using Workday AI agents: agent accounts, ambient permissions, skill security, third-party agents and agent activity.
Priced with your quoteRemediation support
Hands-on help fixing the findings in your tenant, at your pace.
Hourly, quoted separatelyTwice-yearly reviews
A repeat audit every six months that tracks what was fixed and what's new.
Annual pricing on request
See exactly what you'll receive
An 8-page excerpt from a Standard Audit of a fictional company: the executive summary and scorecard, results by module, three example findings with step-by-step Workday fixes, and a look at the findings workbook.
View the sample report (PDF)Read-only from start to finish
Nothing in your tenant is changed during the audit. You run the reports; we do the analysis.
- Week 0
Scoping call
30 minutes to confirm modules, tenant size and the package that fits.
- Week 1
Run the reports
We give you the report definitions. Your team runs them in Production and sends the exports. Standard Audit clients also complete a one-hour questionnaire.
- Weeks 1–3
Analysis
Every check is run, scored and reviewed by hand before anything reaches you.
- Final week
Readout
A 60–90 minute session with HRIS, security and data owners to agree findings, owners and dates.
AY SaaS Consulting
AY SaaS Consulting is an independent Workday consultancy based in Fort Worth, Texas. For ten years we've helped organizations design, support and repair Workday HCM and Workday Security, from role design and business process policies to integrations and audit remediation.
A.Y.M Sentinel packages the security reviews we're asked for most often into a fixed-scope, fixed-price audit. You know exactly what you'll receive and what it costs before any work begins.
What we bring
- Workday expertise: certifications in HCM, Recruiting and Advanced Compensation, with PMP-certified project management.
- Industry experience: healthcare, higher education, technology, transportation, food manufacturing and insurance.
- Independence: we don't resell Workday or other software, so our findings answer only to you.
- Read-only approach: you run the reports and we do the analysis. We never need access to your tenant.
Do you need access to our tenant?
No. Your team runs read-only reports and sends the exports. We never sign in to your tenant or change anything.
How long does it take?
About two weeks for a Security Snapshot and three for a Standard Audit, from the day we receive the report exports.
How is the price set?
By company size and complexity: worker count, whether you run Financials, how many countries you operate in, and how customized your security is. You get a fixed quote after the scoping call.
What happens with our data?
Exports are used only for your audit, kept separate from other clients' work, and deleted on request when the engagement ends.
Can you help us fix the findings?
Yes. Every finding includes the Workday steps to fix it, and remediation support is available by the hour.
Book a 30-minute scoping call
Tell us about your tenant and what's driving the review: an upcoming audit, a reorganization, a new module, or just a sense that access has grown out of control. You'll get a fixed quote within two business days.