Demo visitor guest

Back to the website

Powered by Office Sentry 2.3.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry

Reports

53 reports, for one client or across all 3. Search, or pick the job you're doing.

The controls cyber insurers ask about, and the reports that prove each one.

Summaries1

Evidence and certifications Cyber Essentials and CE Plus judged from the data, with what to fix, and answers to paste into cyber insurance and supplier security forms. All clients

Identity and access7

MFA coverage Who has set up MFA, who is required to use it, and where the two don't match. All clients

Passwords and sign-in methods How people sign in and how strong that is: methods by strength, admins without phishing-resistant MFA, the methods policy, and password age and expiry. All clients

Admins and roles Every admin role holder with MFA, PIM and sign-in status, and a break-glass check. All clients

Conditional Access coverage Every policy in plain words, and which accounts each one actually covers. All clients

Sign-in activity Failed and successful sign-ins over the last week by account, country and app: password guessing, unusual countries, sign-ins without MFA and risky sign-ins. All clients

Risky users Accounts Entra ID Protection rates at risk or confirmed compromised, and the risk resolved recently (needs Entra ID P2). All clients

Legacy sign-ins Sign-ins with SMTP AUTH, IMAP, POP and other protocols that can't do MFA, and which mailboxes still allow them. All clients

Email3

Mail forwarding Every mailbox that sends mail on automatically, and the settings that allow it. All clients

Email domains SPF, DMARC, DKIM, MTA-STS and TLS-RPT for each of the tenant's domains, from public DNS. All clients

Mail rules and protection Mail flow rules and what each does, connectors, and the anti-spam, anti-phishing and anti-malware policies (Safe Links and Safe Attachments too) with whom each applies to. All clients

Devices and apps2

Devices Intune compliance, encryption and Windows support, BitLocker recovery keys saved in Entra ID, and every Entra ID device record. All clients

Intune policies Which platforms have a compliance policy, what each compliance policy requires, configuration profiles and Windows update rings, endpoint security policies and app protection for phones, with whom each applies to. All clients

Tenant and licences1

Admin activity Admin roles, Conditional Access, app credentials, consents, domains and account changes from the directory audit log, and who made them. All clients

Reports open for Contoso Legal LLP. Use “All clients” on a report to compare every client.