Security dashboard
Vulnerabilities
CVE and KEV data merged into one record per CVE, synced daily. CVSS and CWE come from NVD; the KEV flag, due date and ransomware marker come from CISA. Every KEV entry is also a CVE — CVE only excludes the KEV set so the two views complement rather than repeat each other. Not yet joined to any device.
Antivirus Coverage
Which endpoint protection each managed device runs, derived from the ASIO installed-software inventory. Devices with no recognised AV are the ones to fix first — click any row to drill into the devices behind it.
Sophos Security Alerts
Open alerts across every Sophos Central tenant we manage, fetched live from Sophos when you open this page.
Risky Users
Microsoft Entra ID Protection risk state for this tenant, synced daily. Entra raises risk from sign-in signals — impossible travel, leaked credentials, anonymous IPs — and keeps a state per user until it is remediated, dismissed or confirmed safe.
Feedback
Report a bug or request a change against the Security portal. This goes to the same queue as the Help & Feedback widget in the top bar.