See everything.
Change nothing.
Vigil365 watches identity, devices, email and compliance across your Microsoft 365 tenant — collected on a schedule, in one dashboard you host yourself. It reports and recommends, and never has permission to touch your tenant.
Secure Score trend 90d
Defender alerts 33 active
One console for the whole tenant
Vigil365 pulls the signals that are scattered across Defender, Entra, Intune, Exchange and Purview into a single scheduled view — no tab-hopping between admin portals.
Identity & access
Risky users and sign-ins, MFA coverage, privileged roles and PIM, foreign sign-ins — the gaps attackers look for first.
Devices
Intune compliance, non-compliant and stale devices, and Defender for Endpoint alerts — all in one list.
Email threats
Defender for Office 365 alerts by category — malware, phishing, spam — with the threat breakdown and targeted users.
Compliance
DLP, insider-risk and Cloud App alerts, Conditional Access gaps, and attack-simulation results, scored against a baseline.
Alert policies
Metric, activity and anomaly policies with a full acknowledge, snooze, resolve and assign workflow — stored server-side.
Trends & digest
Posture over time from periodic snapshots, plus a scheduled executive digest by email — HTML, CSV and PDF.
It watches. It never touches.
Vigil365 authenticates to Microsoft Graph with app-only, read-only permissions. There is no code path that changes a setting, disables a user, or remediates an alert — so it is safe to run against production from day one.
- ✓Read-only Graph scopes — every permission it requests is a
.Read.All. No write access is ever granted. - ✓Self-hosted — runs on a Windows box you control, against your own SQL Server. Your tenant data never leaves your walls.
- ✓Tamper-evident audit trail — every privileged action in-app is recorded in a SHA-256 hash-chained log.
Running in minutes, not a weekend
One self-contained installer carries the app, the web UI and the .NET runtime. The server needs no source tree, no Node.js and no .NET — just Windows and administrator rights.
Download the installer
Grab Vigil365-Setup.exe from the latest release and run it as Administrator. ~120 MB, nothing else to fetch.
Run the wizard
It registers the Entra app, prepares SQL Server, sets up HTTPS and installs the Windows service — the plumbing is handled for you.
Sign in and go
Open the dashboard, sign in with Microsoft, and the first scheduled collection begins. Real posture data within minutes.
Put your Microsoft 365
security posture on one screen
Free, open source, and self-hosted. Download it, point it at your tenant, and see what your admin portals have been keeping apart.