These are protections included in the licenses we detected — described by what they do for your business, with licensing details shown beneath each card.
Needs attention
Smarter sign-in rules
Microsoft name: Conditional Access
What it does. Decide who can sign in, from where, on which devices, and whether they must prove it is really them (for example with multi-factor authentication).
Why it matters. Passwords alone are not enough. Good sign-in rules stop many everyday account takeovers before damage is done.
If it is not set up. Your licenses include advanced sign-in rules, but they may still be loose or incomplete.
Included through license SKU(s). SPE_E5
Matching service plan(s). AAD_PREMIUM_P2
Needs attention
Deep protection and visibility on PCs and devices
Microsoft name: Microsoft Defender for Endpoint P2
What it does. See attacks on laptops and servers in more detail, find weak software, and respond before a single infected PC becomes a company-wide problem.
Why it matters. Devices are where people work. If they are not enrolled in advanced protection, you are flying partly blind.
If it is not set up. You may be paying for advanced device protection on seats that are not fully enrolled.
Included through license SKU(s). SPE_E5
Matching service plan(s). DEFENDER_ENDPOINT_P2
Partly set up
Watchdogs on your on-site directory (if you still have one)
Microsoft name: Microsoft Defender for Identity
What it does. Spot attackers moving through traditional office servers and Active Directory, not only cloud sign-ins.
Why it matters. Many organizations still rely on on-site domain controllers. Cloud-only tools cannot see every attack path there.
If it is not set up. Identity threat sensors may be missing or unhealthy, so on-site directory attacks stay invisible.
Included through license SKU(s). SPE_E5
Matching service plan(s). No matching service plan reported
Partly set up
Stronger email and file threat protection
Microsoft name: Microsoft Defender for Office 365 P2
What it does. Open risky attachments and links in a safe way, catch advanced phishing, and investigate email threats faster when something slips through.
Why it matters. Most business breaches still start with email. Better email protection reduces ransomware and invoice fraud.
If it is not set up. Extra email protections in your license may still be off, in test mode, or only covering a few people.
Included through license SKU(s). SPE_E5
Matching service plan(s). THREAT_INTELLIGENCE
Needs attention
Stronger control over admin accounts
Microsoft name: Microsoft Entra ID P2
What it does. Give people powerful admin rights only when they need them, and get better tools to catch risky sign-ins on high-value accounts.
Why it matters. Admin accounts are the keys to your email, files, and business apps. If one is stolen, an attacker can look like a trusted employee.
If it is not set up. You are paying for stronger admin protections that are not fully turned on yet.
Included through license SKU(s). SPE_E5
Matching service plan(s). AAD_PREMIUM_P2
Fully working
Alerts when a sign-in looks suspicious
Microsoft name: Microsoft Entra ID Protection
What it does. Automatically spot odd sign-in behavior (impossible travel, leaked passwords, unfamiliar locations) and require extra proof or block access.
Why it matters. Attackers often use valid passwords. Risk detection helps catch the session even when the password was correct.
If it is not set up. Suspicious-sign-in protection is included in your plan but may not be enforcing anything yet.
Included through license SKU(s). SPE_E5
Matching service plan(s). AAD_PREMIUM_P2
Needs attention
A central security command center in the cloud
Microsoft name: Microsoft Sentinel
What it does. Bring security signals together in one place, detect patterns humans miss, and automate parts of incident response.
Why it matters. Without a place that correlates events, teams drown in alerts from many products and miss the story that ties them together.
If it is not set up. A security workspace may exist, but few detections or smart analytics are turned on.
Included through license SKU(s). MICROSOFT_SENTINEL
Matching service plan(s). MICROSOFT_SENTINEL
Needs attention
Guardrails so sensitive data is harder to leak
Microsoft name: Microsoft Purview Data Loss Prevention
What it does. Warn or block people when they try to share credit cards, health data, or other sensitive information in the wrong place.
Why it matters. Accidental oversharing is common. Guardrails protect customers and reduce regulatory and reputational harm.
If it is not set up. Data-protection rules may be missing or still in "test only" mode, so nothing is enforced yet.
Included through license SKU(s). SPE_E5
Matching service plan(s). MIP_S_CLP2