Count every internet-reachable sign-in you expose, mark where MFA is really enforced, and close the paths that skip it. Twelve categories, a coverage matrix, and a help-desk verification script.What you get. One folder: the kit as a single HTML file that opens in any browser and works offline, a print-ready PDF, CSV and Excel worksheets, a START-HERE guide, and the license terms.The worksheet also ships as CSV and as an Excel workbook with the dropdowns already set up, so your data is never trapped in our format.How it runs. No install, no account, no license key, no internet connection. What you type saves to your own browser's local storage on your own machine. The file contains no analytics, no trackers, and no network code — there is nothing in it that can send anything anywhere. Print or export to keep a durable copy.Built for MSPs and IT teams that have never counted their sign-in surface Anyone who says “we have MFA” and hasn't checked it door by door Teams hardening after a season of intrusions that used valid-looking logins Not built for An identity provider or an MFA product A penetration test or an external attack-surface scan A guarantee that every door is covered License. Free to use inside your organization and with your clients, including in paid engagements. You may not resell it or republish it as your own. Full terms are in the download.This kit supports compliance documentation and audit-preparation workflows. It is a practical starting point — review and adapt it for your organization. It is not legal, compliance, or audit advice, and using it does not establish or certify any compliance or security outcome. The Security Gator LLC is not affiliated with or endorsed by NIST or any other standards body.SHA-256 (Gatorbyte-010-login-surface-kit.zip)2992e02450540538cdec0b2997370fce161bea651e746bb766a1f38f3c94067e