SECOPS
No vulnerability scan uploaded yet.
Upload Vulnerability Scan| Vulnerability | Risk | Affected Hosts | CVE | Solution |
|---|
| Host | Critical | High | Medium | Low | Total |
|---|
| Host | Port | Risk | Vulnerability | CVE | Days Open | Due Date | Status | Notes |
|---|
No security awareness data uploaded yet.
Upload CSVFor clients who run awareness training outside this platform. These are client-supplied figures — they are scored at full weight and labelled as unverified wherever they appear.
| Manager | Reports | Incomplete Sessions | Worst Offender | Their Count |
|---|
| # | Name | Manager | Incomplete |
|---|
| # | Name | Manager | Clicks | Most Recent Simulation |
|---|
| Name | Manager | Assigned | Completed | % | Missing |
|---|
Composite score, cyber insurability and GRC standing · with Microsoft’s own Secure Score reported alongside
Governance, Risk & Compliance self-assessment · Cyber insurance readiness
Schedule penetration tests, track engagements & assign tasks
| Title | Client | Tenant | Status | Start | End | Tasks | Actions |
|---|---|---|---|---|---|---|---|
| Loading… | |||||||
| Title | Assignee | Due Date | Status | Notes | Actions |
|---|---|---|---|---|---|
| Select an engagement to view tasks. | |||||
Link this engagement to a tenant above before adding findings — findings flow into that tenant's Remediation Tracker.
| Ref | Title | Severity | CVSS | Owner | Due Date | Status | Actions |
|---|---|---|---|---|---|---|---|
| Select an engagement to view findings. | |||||||
Select an engagement to generate its penetration test report.
Log ongoing incidents, track remediation activity & assignments
| Title | Type | Severity | Status | Phase | Assigned To | Opened | Closed | Activity | Actions |
|---|---|---|---|---|---|---|---|---|---|
| Loading… | |||||||||
Supplier inventory · inherent and residual risk · assurance evidence and review cycle
| Source | Title | Severity | Owner | Due Date | Status |
|---|
SentinelOne endpoint detection & response — threats, endpoint fleet health and console activity
No EDR data yet.
Configure the SentinelOne integration under Admin → Integrations. Data refreshes automatically every 6 hours.
| Endpoint | Detections | Unresolved |
|---|
| Threat | Classification | Count |
|---|
| Detected | Threat | Classification | Endpoint | Confidence | Mitigation | Status |
|---|
| When | Activity | Endpoint | User |
|---|
FortiGate firewall security monitoring via FortiAnalyzer — threats, policy decisions, external sources and privileged access
No firewall data yet.
Configure the FortiAnalyzer integration under Admin → Integrations, and make sure your FortiGates are logging to it.
| Attack | Severity | Detections | Blocked | Allowed Through | Targets |
|---|
| Source IP | Country | Sessions |
|---|
| Port | Service | Sessions |
|---|
| Policy | Name | Sessions |
|---|
| User | Attempts | Source IPs | Reason |
|---|
| Admin | Logins | Via |
|---|
| Config Path | Changes |
|---|
Generative AI use seen in DNSFilter — which tools, who uses them, what is blocked, and whether each tool is sanctioned
No AI usage data yet.
Configure DNSFilter under Admin → Integrations.
| Policy | Generative AI | Mode |
|---|
| Tool | Status | Lookups | Allowed | Blocked |
|---|
| User | Allowed | Blocked | Main Tools |
|---|
Microsoft 365 identity activity via Microsoft Graph and the Office 365 Management API — sign-ins, privileged changes, data sharing and identity risk
No Office 365 data yet.
Switch on Managed Identity collection on the Microsoft Graph integration under Admin → Integrations, grant the listed permissions, then press Test Connection.
| Account | Failures | Source IPs |
|---|
| Source IP | Failures | Accounts Targeted |
|---|
| When | Operation | Actor | Target | Source IP |
|---|
| When | Operation | Mailbox | Actor |
|---|
| Operation | Events |
|---|
| Policy | Matches |
|---|
| Account | Sign-ins |
|---|
| Technique | Alerts |
|---|
| Account | Risk | State |
|---|
Loading…
Each tile shows the value derived from your data. Type in a box to override it on the deck — overrides are saved per client and period.
Opens the report, beneath the headline figures. Auto-drafted from the data — review it before generating. Separate paragraphs with a blank line.
One bullet per line. Edit freely before generating.
Closes the report. Auto-drafted from the data, but review it before generating — it is an attestation, not an automated statement.
Connect external platforms to automatically sync incident and case data.
Scan with Google Authenticator, Authy, or any TOTP app, then enter the 6-digit code to confirm.
Or enter this key manually:
| Username | Role | Tenant | Status | Created | Last Login | Actions |
|---|---|---|---|---|---|---|
| Loading… | ||||||
| Name | Slug | Users | Actions |
|---|---|---|---|
| Loading… | |||
The accent used for buttons, links, selected states and charts, for every user and the client portal. Colours are adjusted automatically where needed so text stays readable in light and dark mode.
Shown in the header, login page, browser tab, client portal and on generated reports (HTML decks, PowerPoint and Word). PNG only, up to 512 KB. A transparent background works best.
Section commentary (optional)
Analyst notes printed beneath a section. Leave blank to omit the block entirely. Saved per client; switching a section off keeps its text.