Works with the tools you already run.

• A ticket for each failing check at or above the severity you choose, closed with a note when it passes
• Tickets for security alerts and drift, as you choose
• Tickets for admin changes that succeed, as you choose (with Automate)
• Scheduled tenant reports, each as a ticket with the report’s link
• Time logged on the ticket for admin changes, if you choose (with Automate)

• Your companies, to map each tenant to one
• Each open ticket’s status, after every assessment
• Ticket updates as they happen, and new leaver tickets, which draft an offboarding for someone to check (webhook, beta)

• A ticket for each failing check at or above the severity you choose, closed with a note when it passes
• Tickets for security alerts and drift, as you choose
• Tickets for admin changes that succeed, as you choose (with Automate)
• Scheduled tenant reports, each as a ticket with the report’s link
• Time entries for admin changes, if you choose (with Automate)

• Your companies, to map each tenant to one
• Each open ticket’s status, after every assessment

• A ticket for each failing check at or above the severity you choose, closed with a note when it passes
• Tickets for security alerts and drift, as you choose
• Tickets for admin changes that succeed, as you choose (with Automate)
• Scheduled tenant reports, each as a ticket with the report’s link
• Time entries for admin changes, once you set the resource and role IDs (with Automate)

• Your companies, to map each tenant to one
• Each open ticket’s status, after every assessment

• A ticket for each failing check at or above the severity you choose, closed with a note when it passes
• Tickets for security alerts and drift, as you choose
• Tickets for admin changes that succeed, as you choose (with Automate)
• Scheduled tenant reports, each as a ticket with the report’s link
• Time logged on the ticket for admin changes, if you choose (with Automate)

• Your companies, to map each tenant to one
• Each open ticket’s status, after every assessment

• A ticket for each failing check at or above the severity you choose, closed with a note when it passes
• Tickets for security alerts and drift, as you choose
• Tickets for admin changes that succeed, as you choose (with Automate)
• Scheduled tenant reports, each as a ticket with the report’s link

• Your companies, to map each tenant to one
• Each open ticket’s status, after every assessment

Nothing: it only reads.

• Devices and open alerts for the site each tenant is mapped to
• Compared with Intune and Entra: devices with an agent but not enrolled, and enrolled devices with no agent

Nothing: it only reads.

• Devices and open alerts for the customer each tenant is mapped to
• Compared with Intune and Entra: devices with an agent but not enrolled, and enrolled devices with no agent

Nothing: it only reads.

• Devices and open alerts for the organisation each tenant is mapped to
• Compared with Intune and Entra: devices with an agent but not enrolled, and enrolled devices with no agent

• A “ConfigCheckup as-built” flexible asset for each mapped organisation, updated every day: the score, open critical and high findings, Conditional Access policies, the GDAP relationship, licences and devices

• Your organisations, to map each tenant to one

• A “ConfigCheckup as-built” article for each mapped company, updated every day: the score, open critical and high findings, Conditional Access policies, the GDAP relationship, licences and devices

• Your companies, to map each tenant to one
• Stored credentials as details only, never the passwords, when the key has password access

• Only the changes a person approves, and only once automation is turned on for the tenant (with Automate)

• Each tenant’s settings, sign-ins and audit log, devices and licences, for the checks, alerts and reports

• Seat changes, each as an approved change (with Automate)

• Your customers, to connect their tenants in bulk through GDAP
• Each tenant’s CSP subscriptions, beside the licences in use

• The audit log as it happens and, if you choose, alerts and the checks that start or stop failing

Nothing.

• What an API key can read, as actions in your flows (on every plan)

• Assessments to queue and changes to draft for approval (with Automate)

Nothing: it only reads.

• Sign-ins from the email domains you have proved are yours
• Group membership, to give each person their role

Nothing: it only reads.

• Members added, changed and suspended, and the groups that give them roles

• Tenants, assessments, findings, reports, changes, baselines, alerts, licences, devices and the audit log (on every plan)

• Assessments to queue and changes to draft for a person to approve (with Automate)

• Signed events, 17 kinds to choose from, such as an assessment finishing, a tenant drifting or a change being approved

Nothing.

• The audit log as it happens and, if you choose, alerts and the checks that start or stop failing, as JSON

Nothing.