Section
Overview
Executive security posture and operational risk overview.
Tenant
Not connected
Privileged Access
n/a
Run scan for Entra permissions
Critical Vulns
Unknown
No vulnerabilities loaded
Urgent Findings
Unknown
No threat context loaded
Device Health
Not assessed
No devices loaded
CA Policies Active
Unknown
No CA policies loaded
Priority actions
Priority actions
| Check / finding | Result | Severity | Affected scope | Next action |
|---|
Vulnerabilities
Endpoint Exposure
Standards Readiness Snapshot
Technical evidence mapped to frameworks; broader outcomes remain separate.
Device Distribution
Total Devices
0
Across all device types
Vulnerability Risk Overview
At-a-glance risk posture for immediate situational awareness. Use the explorer below to drill down.
Urgent Findings
Highest urgency findings and exploit context driving current risk.
Threat Label Guide
Threat activeCVE is marked as actively exploited in current data.
Wormable-LikelyPropagation indicators plus delivery or high-impact signals suggest spread potential.
Ransomware-LikelyPost-compromise privilege abuse combined with spread or high-impact indicators.
Initial-Access-LikelyDelivery and execution indicators suggest likely initial-access paths.
These labels are prioritisation heuristics from CVE metadata and exploit context, not definitive threat intelligence.
Severity Distribution
Impacted Devices
Devices with the broadest vulnerability overlap in the current feed. Click one to filter the explorer.
Top Impacted Devices
Risk Software
Software clusters contributing the most current vulnerability exposure. Click one to filter the explorer.
Top Risk Software
Vulnerability Explorer
MITRE ATT&CK — Findings & Reviews
Actionable findings and access reviews from collected evidence. Results without a defensible technique link remain visible. These findings do not establish detection coverage or effective protection.
Review candidates can be legitimate. Confirm intent and scope before considering any change.
A result can appear under several tactics; overall totals count it once. Tactics describe documented associations, not complete attack coverage.
Red: high-priority confirmed findingAmber: other findings or reviewsGrey: insufficient assessmentGreen: explicitly passing check
Cyber Essentials Technical Controls
Technical check results
Evidence missing
Technical evidence across five control areas.
Framework reference and assessment notes
Framework reference: Cyber Essentials Requirements for IT Infrastructure v3.3 (from 27 April 2026) · Last checked: 29 Apr 2026
Technical checks in observed scope; certification requires separate evidence.
Evidence sources
Additional evidence requirements
Collected tenant fields cannot establish these requirements. Excluded from technical checks and remediation counts.
NIST CSF 2.0 Technical Signal Snapshot
Technical check results
Evidence missing
Technical checks mapped to framework areas.
Framework reference and assessment notes
Framework reference: NIST CSF 2.0 · Last checked: 29 Apr 2026
Technical checks in observed scope; broader framework outcomes require separate evidence.
Evidence sources
Additional evidence requirements
Collected tenant fields cannot establish these requirements. Excluded from technical checks and remediation counts.
NIS2 Technical Signal Snapshot
Technical check results
Evidence missing
Framework reference and assessment notes
Framework reference: NIS2 Directive (EU) 2022/2555 · Last checked: 29 Apr 2026
Technical evidence mapping; governance and legal obligations require separate review.
Evidence sources
Scope: Selected Article 21 technical signals only; governance, legal duties and effectiveness require separate evidence.
Additional evidence requirements
Collected tenant fields cannot establish these requirements. Excluded from technical checks and remediation counts.
Device Inventory
NO LIVE DATA
| Device Name | Type | OS | Health | Platform Ver. | Engine Ver. | Security Intel Ver. | Mapped OS Patches | Vulns | CA Application |
|---|
Mapped OS Patches are KB references returned with Defender vulnerabilities. Zero does not prove patch compliance; Unknown means evidence is incomplete or unavailable. CA application is not assessed per device and requires sign-in evidence.
Conditional Access
Assignment evidence only — scope and policy state are not runtime coverage measurements.
Conditional Access Policies
Assignment evidence only — scope and policy state are not runtime coverage measurements.
Policy Design Insights
Policy state and assignment evidence support design review. Runtime policy impact must be validated in Conditional Access sign-in logs.
Policy Overlap & Duplication
Detects exact duplicates, high overlap, and conflicting controls to reduce policy sprawl and simplify CA design.
Selected policy details
Conditional Access Journey Map
Configuration evidence from identity scope to enforcement. Recommendations identify improvements; sign-in logs verify runtime impact.
Recommended Improvements
Recommendations are based on policy configuration evidence. Validate expected impact in Conditional Access sign-in logs before enforcing changes.
Endpoint Security Policy Inventory
Returned policy configuration and assignments. Device delivery and compliance require separate evidence.
Policy OS Scope
Policy platforms and observed endpoint inventory; platform membership does not prove policy application.
Endpoint Policy Explorer
Showing 0 policies
Microsoft Secure Score Recommendation Gaps
Control-level recommendations pulled from Microsoft Graph Security secureScores and secureScoreControlProfiles, grouped by workload to show where secure-score gaps remain.
Recommendation Breakdown by Workload
Defender Stack Compliance
Defender Health
Latest Platform Version
n/a
Coverage
0.0%
Compliance & Gap Reports
Generate criteria-based compliance and gap reports across Cyber Essentials, NIST, NIS2, Secure Score, Entra identities, MDE posture, Conditional Access, endpoints, vulnerabilities and MITRE ATT&CK findings and reviews.
Click domains to include or remove them from the report. Selected domains are highlighted in orange.
Risk Landscape
Priority Actions
Report Preview