> ## Documentation Index
> Fetch the complete documentation index at: https://docs.msportal.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Find provider security reports in MSPortal and learn which guide covers each tab.

Security brings the findings from your connected security tools into one place. It is for company users and MSP staff. Which tabs you see depends on your permissions and on which integrations your MSP has connected.

## Before you start

* Security read access shows the report tabs. **Security Awareness** has its own read permission, and **DNS Policies** needs DNS filtering read access.
* A tab appears only when its integration is connected. If none is connected for you, you see **Security integration unavailable**. That message does not mean you have no security issues.
* Your MSP manages roles, integrations, and company mapping. Company admins ask their MSP to change access.

## Open Security

<Steps>
  <Step title="Open Security">
    Click **Security** in the sidebar.
  </Step>

  <Step title="Check the company selector">
    Choose the company, or all companies, whose data you want.
  </Step>

  <Step title="Pick a tab">
    Click a tab in the header. The sections below list each tab, where its data comes from, and its guide.
  </Step>
</Steps>

## Find the right tab

| Tab | What it shows | Guide |
| - | - | - |
| **Dashboard** | Tiles and cards from Cork, Acronis, Huntress, Avanan, Petra Security, and Fortinet. | [Read the Security Dashboard](/user-guides/security/read-dashboard) |
| **Compliance** | Cork security compliance events, affected entities, and evidence. | [Read Cork security compliance events](/user-guides/security/read-cork-events) |
| **Vulnerabilities** | Software vulnerabilities from Cork, Action1, and RoboShadow, with CVE, CVSS, and source. | [Find and read vulnerabilities](/user-guides/security/read-vulnerabilities) |
| **Endpoints** | Endpoint records from Cork, Acronis, and Bitdefender GravityZone. | [Find security endpoints](/user-guides/security/find-endpoints) and [Read security endpoint details](/user-guides/security/read-endpoint-details) |
| **EDR Incidents** | Acronis endpoint detection and response incidents. | [Read Acronis EDR incidents](/user-guides/security/read-edr-incidents) |
| **Security Awareness** | Training and phishing data from CyberHoot, Breach Secure Now, Phin, Huntress, and Avanan. | [Read CyberHoot company summaries](/user-guides/security/read-cyberhoot-companies) and [Security awareness overview](/user-guides/training/security-awareness) |
| **Huntress** | Huntress escalations, incident reports, and remediations. | [Read Huntress security items](/user-guides/security/read-huntress) |
| **DNS Filtering** | DNSFilter and ScoutDNS organizations, roaming clients, blocked requests, and threats. DNSFilter also adds threat events and top domains. | [Configure ScoutDNS Integration](/user-guides/integrations/enable-scoutdns-integration) |
| **Email Security** | Avanan threats, spam filter settings, and tenants. | None yet |
| **Identity Threats** | Petra Security Microsoft 365 account compromises, failed sign-in attacks, and tenant posture scores. | [Configure Petra Security Integration](/user-guides/integrations/enable-petra-integration) |
| **DNS Policies** | DNSFilter policies and their blocked and allowed websites. | None yet |

If you hold only Security Awareness access, Security opens on that tab.

**Security > Compliance** is different from the [Compliance assessment module](/user-guides/compliance/index). The Security tab shows events imported from Cork. The assessment module holds checks, runs, and evidence.

## Follow up on a finding

* MSP staff can turn findings into work. See [Add security findings to Planner](/user-guides/security/add-to-planner), [Add Cork findings to a meeting agenda](/user-guides/security/add-to-meeting), and [Follow up on EDR incidents](/user-guides/security/follow-up-edr-incidents).
* Company users should describe the finding to the [Home AI Assistant](/user-guides/ticketing/open-a-ticket), including the company, the affected item, the event type or CVE, and the date shown, then confirm the request when prompted. Viewing a finding does not create a ticket.

## Set up the integrations

MSP staff connect each source from **Settings > Integrations**.

* [Cork](/user-guides/integrations/enable-cork-integration)
* [Acronis](/user-guides/integrations/enable-acronis-integration)
* [Huntress](/user-guides/integrations/enable-huntress-integration)
* [Phin](/user-guides/integrations/enable-phin-integration)
* [CyberHoot](/user-guides/integrations/enable-cyberhoot-integration)
* [Breach Secure Now](/user-guides/integrations/enable-breach-secure-now-integration)
* [Petra Security](/user-guides/integrations/enable-petra-integration)
* [Bitdefender GravityZone](/user-guides/integrations/enable-bitdefender-integration)
* [Action1](/user-guides/integrations/enable-action1-integration)
* [RoboShadow](/user-guides/integrations/enable-roboshadow-integration)
* [ScoutDNS](/user-guides/integrations/enable-scoutdns-integration)
* [Fortinet](/user-guides/integrations/enable-fortinet-integration)

Petra Security, Bitdefender GravityZone, Action1, RoboShadow, ScoutDNS, and Fortinet are in **Beta**.

To change what a person can see, see [Company user permissions](/user-guides/settings/change-company-user-permissions).

## How often data updates

| Data | Sync schedule |
| - | - |
| Cork compliance events | Every 2 hours |
| Cork vulnerabilities | Every 6 hours |
| Cork endpoints | Every hour |
| Acronis EDR incidents | Every hour |
| Acronis endpoints | Every 6 hours |
| Huntress security items and agents | Once a day |
| CyberHoot | Once a day |
| Avanan | Every hour |
| DNSFilter | Every 2 hours |
| ScoutDNS | Once a day |
| Petra Security incidents and posture | Every 2 hours |
| Petra Security failed sign-in attacks | About once a day per tenant |
| Bitdefender GravityZone | Every 4 hours |
| Action1 vulnerabilities | Once a day |
| RoboShadow | Once a day |
| Fortinet | Once a day |

## Troubleshooting

| Problem | What to do |
| - | - |
| A tab is missing | The integration is not connected, or your role lacks the permission. Ask your MSP admin. |
| **Security integration unavailable** | Same causes. An admin with integration access can connect it from **Settings > Integrations**. |
| A tab is empty | Check the company selector and clear filters. Then ask your MSP to confirm the integration sync and company mapping. |
| Data looks old | Security shows synced data on the schedule above. Opening a tab does not start a new scan. |

## Frequently asked questions

<AccordionGroup>
  <Accordion title="Is Security only for Cork?">
    No. Cork, Acronis, Huntress, Avanan, DNSFilter, ScoutDNS, Petra Security, Bitdefender GravityZone, Action1, RoboShadow, Fortinet, and several awareness providers feed different tabs.
  </Accordion>

  <Accordion title="Why can I see Security Awareness but not the other tabs?">
    Security Awareness has its own read permission. Ask your MSP admin if you need more access.
  </Accordion>

  <Accordion title="Is a Cork compliance event the same as an assessment check?">
    No. Cork events are on **Security > Compliance**. Assessments are in the separate Compliance module.
  </Accordion>

  <Accordion title="Does an empty page prove there are no issues?">
    No. Scope, filters, missing mappings, or an unsynced integration can all leave a page empty.
  </Accordion>
</AccordionGroup>

## Related guides

* [Compliance](/user-guides/compliance/index)
* [Security awareness overview](/user-guides/training/security-awareness)
* [Planner](/user-guides/planner/index)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.