M365 control changes
Secure Score, Conditional Access, or identity settings that differ from prior runs.
Solution
Configuration drift monitoring for Microsoft 365
Detect when Microsoft 365 or monitored asset configuration changes between assessments. Surface drift as findings and monitoring alerts for MSP triage.
What drift looks like in practice
DNS record changes
Domain configuration drift on monitored customer assets.
Certificate changes
SSL/TLS configuration differences between scans.
New findings
Issues that appear when reassessment compares against prior state.
From detection to response
Scheduled comparison
Scheduled assessments and asset scans compare current results against previous runs.
Alert routing
Notification policies can route drift-related events to configured alert groups.
Drift in the posture workflow
- Baseline capture
- First assessment establishes the starting posture state.
- Ongoing monitoring
- Subsequent runs detect changes from baseline.
- Finding prioritization
- Drift-related findings ranked by severity.
- Customer reporting
- Posture changes documented in customer reports.
Related pages
- Security posture
Posture management and drift context.
- Alert management
Route drift alerts to your team.
- Security findings
Findings from drift detection.
- Solutions
MSP workflow scenarios.
- Contact
Request a demo.