Self-hosted · Microsoft 365 security

See everything.
Change nothing.

Vigil365 watches identity, devices, email and compliance across your Microsoft 365 tenant — collected on a schedule, in one dashboard you host yourself. It reports and recommends, and never has permission to touch your tenant.

Read-only Graph scopes Collects every 15 min One .exe, no dependencies
Coverage

One console for the whole tenant

Vigil365 pulls the signals that are scattered across Defender, Entra, Intune, Exchange and Purview into a single scheduled view — no tab-hopping between admin portals.

Identity & access

Risky users and sign-ins, MFA coverage, privileged roles and PIM, foreign sign-ins — the gaps attackers look for first.

Devices

Intune compliance, non-compliant and stale devices, and Defender for Endpoint alerts — all in one list.

Email threats

Defender for Office 365 alerts by category — malware, phishing, spam — with the threat breakdown and targeted users.

Compliance

DLP, insider-risk and Cloud App alerts, Conditional Access gaps, and attack-simulation results, scored against a baseline.

Alert policies

Metric, activity and anomaly policies with a full acknowledge, snooze, resolve and assign workflow — stored server-side.

Trends & digest

Posture over time from periodic snapshots, plus a scheduled executive digest by email — HTML, CSV and PDF.

Safe by design

It watches. It never touches.

Vigil365 authenticates to Microsoft Graph with app-only, read-only permissions. There is no code path that changes a setting, disables a user, or remediates an alert — so it is safe to run against production from day one.

  • Read-only Graph scopes — every permission it requests is a .Read.All. No write access is ever granted.
  • Self-hosted — runs on a Windows box you control, against your own SQL Server. Your tenant data never leaves your walls.
  • Tamper-evident audit trail — every privileged action in-app is recorded in a SHA-256 hash-chained log.
M365
Your tenant
Defender · Entra · Intune · Purview
read
Scheduled collection
Graph app-only · every 15 min · read-only
Vigil365
alerts · trends · compliance · digest
you
Your team
Teams · email · webhook · SIEM
Install

Running in minutes, not a weekend

One self-contained installer carries the app, the web UI and the .NET runtime. The server needs no source tree, no Node.js and no .NET — just Windows and administrator rights.

Download the installer

Grab Vigil365-Setup.exe from the latest release and run it as Administrator. ~120 MB, nothing else to fetch.

Run the wizard

It registers the Entra app, prepares SQL Server, sets up HTTPS and installs the Windows service — the plumbing is handled for you.

Sign in and go

Open the dashboard, sign in with Microsoft, and the first scheduled collection begins. Real posture data within minutes.

Vigil365 1.0.0 · out now

Put your Microsoft 365
security posture on one screen

Free, open source, and self-hosted. Download it, point it at your tenant, and see what your admin portals have been keeping apart.

Windows 10/11 · Server 2019+ · SQL Server Express (free) · a Microsoft 365 tenant
Questions or feedback? Reach me at samir@vigil365.in · LinkedIn