Review the selected scope
- Open Security > Dashboard.
- Confirm the company selection. An MSP aggregate view can include multiple companies.
- Read the provider sections that appear.
- Follow a count or status link to inspect its underlying records. Check any filters already applied on the destination page.
Read Cork results
Compliance Events highlights the number marked At Risk, with a total-event count below it. The Compliance Overview includes separate At Risk and Resolved counts. These are different properties, not complementary categories that must add up to the total. Vulnerabilities highlights Critical priority. Its detail card shows Total, Critical Priority, Known Exploited, and Monitored Endpoints when available. Critical and Known Exploited can overlap; do not add them together as a count of distinct findings. Use Cork events or vulnerabilities to investigate. An At Risk, Resolved, Critical, or Known Exploited shortcut applies that filter to the relevant table.Read Acronis results
EDR Incidents shows a total and the number open. The EDR Overview separates Open Incidents, Investigating, and Closed, with Not Mitigated shown when applicable. Incident state and mitigation are separate: a state label alone does not establish that mitigation is complete. Endpoints Online and Endpoint Health distinguish Online/Offline from Protected/Unprotected. Online describes connectivity; it does not itself prove protection. Follow an available endpoint or incident shortcut to review the underlying records. The phrase All addressed can appear when the open count is zero, including a zero-total summary. Check the total, other incident states, provider freshness, and mitigation before relying on that wording.Read Huntress results
Huntress summaries can show open escalations, active agents, SAT learners and accounts, open incident reports, and pending remediations. The links lead to Huntress. They do not necessarily prefilter the destination to the exact category shown on the card. Active agents, protected-agent totals, and learner counts describe different populations. SAT learner counts do not mean all learners completed their training.If numbers are missing or unexpected
Only available provider summaries appear. A provider read failure can omit its section while other providers still render. No Security Data Yet, an absent card, or zero totals should not be interpreted as a clean security assessment. Check company scope, the source provider, and any destination-table filters. MSP staff should verify synchronization when figures appear stale. Company users can request investigation through the Home AI Assistant.Frequently asked questions
Can I add Critical and Known Exploited to get a total?
Can I add Critical and Known Exploited to get a total?
No. A vulnerability can belong to both groups. Use Total for the summary’s overall finding count.
Does At Risk plus Resolved equal every Cork event?
Does At Risk plus Resolved equal every Cork event?
Not necessarily. Risk and resolution are separate event properties.
Does Online mean an endpoint is protected?
Does Online mean an endpoint is protected?
No. Connectivity and protection are reported separately.
Why did the Huntress shortcut open a broader list?
Why did the Huntress shortcut open a broader list?
Dashboard Huntress links open the Huntress section. Review its item-type and search filters rather than assuming the exact card category is already selected.