SharePoint Forge Signal365 Security
An executive security-posture dashboard that distils your Microsoft 365 account hygiene into six RAG KPIs on one screen — Secure Score, MFA coverage, stale accounts, guest exposure, privileged roles and Conditional Access — from live tenant signals where licensing and availability allow.
£995/year
The business problem
Why this package exists.
A CISO's question is simple — 'are we protected?' — but the answer is buried across the Microsoft 365 Defender portal, Entra, Secure Score and a dozen reports. Boards get either a 200-page export or a gut-feel reassurance. Signal365 Security gives leadership a continuous, in-tenant RAG dashboard of the six metrics that actually move the needle on account hygiene, with the evidence behind each one a click away — no SaaS subscription, no PII leaving the tenant.
Included with Signal365 Security
- Six executive KPI cards — Secure Score, MFA coverage, stale accounts, guest exposure, privileged roles and Conditional Access — each with a RAG status
- Live threshold tuning — adjust what 'good' means and the dashboard recomputes instantly without re-querying
- Branded PDF and PPTX export with an evidence appendix for the board pack
- Graceful degradation — each KPI fails independently, so a missing signal never blanks the whole dashboard
- Least-privilege, read-only Microsoft Graph permissions
- No PII held at rest in the browser — in-memory cache only
- Deployment guide, admin checklist and release notes
What you get
A package designed to be deployed, not consulted on.
Deployment model
Designed to be deployed by a Microsoft 365 or SharePoint administrator using the included guide. Typical deployment is a single working session, not a project.
Licence & support
Licensed annually to one verified business domain. Active licence includes downloads, documentation, supported updates and authenticated support tickets.
Technical requirements
Requires SharePoint Online with a tenant-level App Catalog. The web part requests a small set of least-privilege, read-only Microsoft Graph permissions covering Secure Score, MFA registration, risk detections, sign-in activity, directory roles and Conditional Access — approved once by a tenant admin via SharePoint Admin → API access. Viewers need a directory role that can read tenant security data (Global Reader or Security Reader is the typical fit). KPIs populate only where your Microsoft 365 / Entra licensing exposes the underlying signals (e.g. risk detections require the relevant Entra ID P2 features).
FAQ
Common questions.
Is this a replacement for Microsoft Defender or Secure Score?
No — it sits on top of them. It reads Secure Score and the underlying Entra signals and presents the six metrics leadership cares about as a single RAG view. For deep investigation you still use the Microsoft security portals; this is the executive summary that points you at what needs attention.
What if our tenant doesn't have the higher Entra licences?
Each KPI degrades independently. Where a signal needs a licence you don't hold (for example risk detections under Entra ID P2), that card is marked not assessable with a clear reason and the rest of the dashboard is unaffected.
Does any data leave our Microsoft 365 tenant?
No. The dashboard reads Microsoft Graph inside your tenant, holds no PII at rest in the browser (in-memory cache only), and generates exports client-side. The only outbound call is the standard SharePoint Forge licence heartbeat that verifies your subscription — see Privacy Policy §2.
Ready to deploy Signal365 Security?
Buy securely through Stripe, then access your package and documentation through the SharePoint Forge customer portal.
Related
Other SharePoint Forge packages.
NIST CSF Tracker
A continuous NIST CSF 2.0 control tracker driven by live Microsoft 365 tenant signals, where licensing and availability allow.
- Live NIST CSF 2.0 tenant signals, where available
- Built-in tracker for manual subcategories
- Auditor-ready PDF + CSV exports
Cyber Essentials Tracker
A continuous UK Cyber Essentials and CE Plus control tracker driven by live Microsoft 365 tenant signals, where licensing and availability allow.
- Live Cyber Essentials tenant signals, where available
- Seeded CE+ control tracker
- Assessor-ready evidence pack
Signal365 Cost
An executive licence-efficiency dashboard that surfaces wasted Microsoft 365 spend from idle and inactive licences, where signal availability allows.
- Monthly licence-waste figure in GBP, where signals allow
- Per-SKU utilisation + inactive users
- Branded PDF + PowerPoint export