Library
Identity & resource insights
The risks an inventory surfaces, one page each: why they matter, a free script to find them yourself, and what to do next.
4risk views explained
2clouds
Microsoft 365
2 risk views explained- Identity & Access GovernanceUsers inactive 90 daysUsers inactive 90 days are accounts in your Microsoft Entra tenant whose last recorded sign-in is older than 90 days; they are a security risk because nobody notices if one is misused. You can list them yourself with a read-only Microsoft Graph PowerShell query against the signInActivity property.Read the guide →
- Identity & Access GovernanceUsers who never signed inUsers who never signed in are accounts that exist in your Microsoft Entra tenant but have no recorded sign-in activity at all, so they are easy to forget and still carry access. You can list them with a read-only Microsoft Graph PowerShell query against the signInActivity property.Read the guide →
Microsoft Azure
2 risk views explained- Identity & Access GovernanceAzure resources with public network accessAzure resources with public network access accept connections from the public internet unless a firewall rule or private endpoint limits them. Listing which storage accounts, SQL servers and Key Vaults have it enabled shows where your exposure starts.Read the guide →
- Identity & Access GovernanceAzure resources below the minimum TLS versionSome Azure resources still accept connections over older TLS versions because their minimum TLS version setting is lower than the current recommendation. Listing the setting on your storage accounts and SQL servers shows which ones need raising.Read the guide →
What every insight page covers
- Why it mattersThe risk behind the view, with a cited source.
- Find it yourselfA free, read-only script you run yourself.
- Read the resultWhich entries need a closer look.
- What to do nextClean-up steps and what to check first.
See every risk view for your own tenant
Inventory & Insights shows these risks as built-in views across your clouds, with CSV export. Read-only.