Security alerts

Insights → Security reads Microsoft Secure Score, MFA coverage, Conditional Access posture, Global Administrator count and at-risk accounts from a connected Microsoft 365 tenant. It's locked until you connect one — see "Connecting Microsoft 365" — after which it shows your current Secure Score, a score trend across assessments, and a checklist of specific issues with plain-English fixes. The assessment re-runs itself every night, and each failing check becomes a critical alert on the Alerts page rather than sitting in a report nobody reads. A few checks depend on Microsoft licensing and extra Graph permissions (risky users needs Entra ID P2, for example) — where those aren't available the check reports as unknown rather than failing.