What's covered versus what's missing, by security domain — driven by which platforms you've connected and what they report.
A domain is Covered when a source is connected and reports no high/critical issues, At risk when a connected source reports a verified high/critical finding, and a Gap when nothing is connected to watch it. Nothing here is assumed — a gap is an honest blind spot, not a clean bill of health.
Security coverage at a glance — which domains are protected and where the gaps are, by area. Updates as you connect sources. (Beta.)
4
Domains covered
Protected and healthy
1
Domains at risk
1 verified high/critical finding
5
Coverage gaps
No source connected — blind
Identity & Access
Connected via Okta, Supabase, but 1 high finding needs attention.
Stolen or weakly-protected logins are the #1 way attackers get in. This domain watches MFA, admin accounts and sign-ins.
Email Security
No source connected — email security is unmonitored.
Phishing and business-email-compromise are the most common breach trigger. This domain watches inbound email threats.
Application & Code
No source connected — application & code is unmonitored.
Vulnerable code and leaked secrets ship straight to production. This domain watches your software supply chain.
Backup & Recovery
No source connected — backup & recovery is unmonitored.
When ransomware hits, tested backups are the difference between a bad day and going out of business.
Vulnerability Mgmt
No source connected — vulnerability mgmt is unmonitored.
Unpatched, known vulnerabilities are how most breaches happen. This domain finds them before attackers do.
Governance & Compliance
No source connected — governance & compliance is unmonitored.
Continuous evidence (SOC 2, ISO 27001) keeps you audit-ready and proves to customers you take security seriously.
Endpoints / EDR
Covered by Defender for Endpoint, CrowdStrike — connected and reporting clean.
Laptops and servers are where ransomware lands first. Without an EDR you have no eyes on what runs on your machines.
Cloud Posture
Covered by AWS Security Hub — connected and reporting clean.
Misconfigured cloud accounts leak data silently. This domain watches your cloud platforms, hosting and infrastructure.
Network & Web Edge
Covered by SSL/TLS scan, Subdomain scan — 3 healthy signals, no high/critical issues.
Your public-facing domains, certificates and firewalls are the front door. Expired certs and open ports invite trouble.
Visibility / SIEM
Covered by Microsoft Sentinel — connected and reporting clean.
A central log feed is what lets you actually detect an attack in progress instead of reading about it later.
Close 5 coverage gaps
Each connected source turns a blind spot into monitored, covered ground.