Skip to main content
Use this page to read the Security Dashboard and jump to the records behind each number. It is for company users and MSP staff.

​
Before you start

  • You need Security read access.
  • At least one of Cork, Acronis, Huntress, Avanan, Petra Security, Fortinet, or Cyrisma must be connected. The Dashboard tab appears only then. See Security for the integration guides.
  • The dashboard shows imported data. Opening it does not run a scan.

​
Review the dashboard

1

Open the Dashboard

Open Security > Dashboard and check the company selector. A selection of several companies adds them together.
2

Read the tiles

The tiles at the top show the key numbers for each connected provider. Colors mark tiles that need attention.
3

Read the cards

Below the tiles, one card per provider gives more detail. Only connected providers appear.
4

Follow a number

Click a tile or a count on a card to open the matching list. Check the filters already set on that list.

​
Read the tiles

Tiles show how many items were new in the last 30 days when that history is available.

​
Read the cards

​
Cork

  • Compliance Overview shows At Risk and Resolved counts, At-risk events by control, and New events per day. At Risk and Resolved are separate properties and need not add up to the total.
  • Vulnerabilities shows Total, By priority, Known Exploited, and Monitored Endpoints. Critical and Known Exploited can overlap, so do not add them.
  • Counts link to Security > Compliance or Security > Vulnerabilities, with the matching filter set.

​
Acronis

  • EDR Overview shows Open Incidents, Investigating, and Closed, plus Open by severity, New incidents per day, a high severity count, and Not Mitigated.
  • Endpoint Health shows Online, Protected, Offline, and Unprotected. Online and Protected are separate.
  • All addressed can appear when the open count is zero. Check the other states and Not Mitigated before you rely on it.
  • Counts link to EDR Incidents and Endpoints.

​
Huntress

  • Huntress overview shows escalations, incident reports, and remediations with open, resolved, and pending counts, Open by severity, Detections per day, Agent coverage, and SAT learners and SAT accounts.
  • Every link opens Security > Huntress. It does not preselect a type.

​
Avanan

  • Email security overview shows Threats by type, last 30 days, a threat trend, SAT-covered tenants, Spam (30 days), and Graymail (30 days).
  • Links open Security > Email Security.

​
Petra Security

  • Identity threats shows Microsoft 365 account compromises detected by Petra. Open incidents by company lists the companies with unremediated incidents, and No open incidents appears when there are none.
  • Underneath, it shows Live incidents (30 days), Historical incidents, Failed sign-in attacks (30 days), and Average posture score. Historical incidents are compromises Petra found in past sign-in data when it onboarded a tenant, not new attacks.
  • The tiles and each company link open Security > Identity Threats, filtered to open incidents when there are any.

​
Fortinet

  • Fortinet firewalls shows FortiGate connection, FortiOS firmware, and FortiCare and FortiGuard coverage from the last sync, with FortiGates, Connected, Firmware behind, and Renewals due in 90 days.
  • Coverage ending soonest lists the FortiGate coverage lines that end first, and Issues by company shows where FortiGates need attention. No FortiGate needs attention. appears when nothing does.
  • The card appears when Fortinet is connected and at least one FortiGate is in the selected companies. Renewal dates need Asset Management access on the Fortinet connection. See Configure Fortinet Integration.
  • The Fortinet tiles and card do not open a list. Open a FortiGate in Devices to see its firmware and coverage.

​
Cyrisma

  • Cyrisma vulnerability posture covers the Cyrisma tenants mapped to the selected companies. It shows the Average score (or the company’s Overall grade when one company is selected), Clients graded, Assets scanned, and Distinct CVEs.
  • Open findings by severity splits the open findings into Critical, High, Medium, and Low. A finding is one CVE on one asset, so one CVE on ten assets counts ten times.
  • Findings remediated per day draws the daily remediation counts Cyrisma reports for the last 31 days, today included. Its total matches the Remediated (30 days) tile. The chart appears after the first daily Cyrisma sync.
  • Lowest grades lists the five companies with the weakest Cyrisma grade, with their open critical findings and findings remediated in the last 30 days. Grades are Cyrisma’s own letters, from A+ to F.
  • The tiles and each company open Security > Vulnerabilities filtered to Cyrisma, and to that company or to known exploited CVEs where it applies.

​
Troubleshooting

​
Frequently asked questions

No. A vulnerability can be both. Use Total for the overall count.
Not necessarily. They are separate properties.
No. Connectivity and protection are reported separately.
Tell the Home AI Assistant which tile or card you mean and the company, then confirm the request when prompted.