Silo City ITVigilus · by Silo City IT
Assessment, incident response and remediation for Microsoft 365
One platform that finds the gaps, investigates when something goes wrong, and closes what it finds. Google Workspace is next.
Assess
281 checks across 12 domains
Vigilus reads your tenant's configuration with read-only app permissions and evaluates every setting against a written policy. Each finding comes with its severity, the evidence Vigilus saw, and the steps to fix it.
Copilot is assessed by default, like every other domain.
| Domain | Checks | Share |
|---|---|---|
| Entra ID | 62 | |
| Defender | 38 | |
| Copilot | 33 | |
| Conditional Access | 25 | |
| Teams | 21 | |
| Exchange Online | 19 | |
| Power Platform | 18 | |
| SharePoint / OneDrive | 18 | |
| Applications | 17 | |
| Authentication Methods | 10 | |
| Intune | 10 | |
| Purview | 10 | |
| Total | 281 |
Map
Findings mapped to the frameworks you report on
Vigilus maps findings to framework controls so your team can see where a gap sits on the path to the certification you need. It supports your audit; it does not certify you.
Report
AI-enhanced reports, zero data retention
Executive and technical reports written for each audience. Your data is never stored by the model service, never used to train a model, and never shared with an AI vendor.
Respond
When an alarm sounds, the evidence is already on its way
Open a case and run a playbook. Vigilus pulls sign-ins, audit logs and mailbox activity, builds a timeline, and proposes response actions. Nothing changes in your tenant until an analyst approves it.
Account takeover
Risky sign-ins, new MFA methods, role changes and token activity for the affected user.
Business email compromise
Inbox rules, forwarding, delegate permissions and mailbox access.
OAuth consent abuse
Consent grants, app permissions and service principal credentials. Risky grants can be revoked one at a time.
SharePoint data exfiltration
Downloads, anonymous links and search exports across SharePoint and OneDrive.
Remediate
Finding a gap is only the beginning
Approved configuration fixes run automatically. Every change is snapshotted first and verified after, with rollback if it does not hold.
199 remediation articles, and growing
Each article gives the fix steps, threat hunts to check whether the gap was already used, and a validation step to prove it is closed.
External attack surface
Early accessMaps the subdomains, exposed services and cloud storage that face the internet.
Google Workspace
Coming soonAssessment and incident response for Google Workspace, built on the same platform.
Mission first. Focused on your protection.
Identifying a security gap is only the beginning. Helping you close it is what matters.