Every alert shows how sure it is.
Microsoft 365 sign-in alerts are noisy.
Every client has a different normal.
What if each alert showed how sure it was?
What would that fix for you?
Quiet by default
A fresh instance opens no tickets from alerts.
Every alert stays visible.
Trust
Each finding gets a confidence score.
The alert page shows it factor by factor.
Training
Security awareness training is built in.
It is off until you turn it on.
Step by step
How it works
- 1
Connect a client's Microsoft 365.
- 2
CyberSentry reads sign-ins, the directory and Secure Score.
- 3
Each finding gets a confidence score, shown factor by factor.
- 4
Monitor mode records what would have fired, without acting.
- 5
A What-if simulator tries thresholds without changing anything.
- 6
Arm a Response Rule when you are ready.
What's different
The score shows its reasoning, not just an alert.
Each client's Security tab teaches it how their people work.
A banned country or a known attacker address still flags.
What stays in your hands
- It needs the client's Microsoft 365 connected.
- A lock or ticket needs an armed rule or Live engine.
- Training is off until an admin turns it on.
- A client's plan must include Security awareness training.
Read more in the help center
- What the CyberSentry Overview shows, and where each page takes you
- What a CyberSentry alert page shows, and what you can do on it
- How a client's security settings work in CyberSentry
- How Response Rules and the Confidence Engine work
- How to set up a response rule in CyberSentry
- How to run security awareness training for each client
- What security alerts show in the client portal
- What the Microsoft Entra ID and Mail pages show
- See and work every alert from one page
Questions, answered.
How do I monitor Microsoft 365 sign-ins for clients?
Connect the client's Microsoft 365.
CyberSentry scores sign-in and directory findings.
It shows their Secure Score too.
It acts only with an armed rule or a Live engine.
Is there a PSA with security awareness training?
Yes, it is built in, and off until you turn it on.
It writes an annual training for each client.
You edit it before it goes out.
Will it open a ticket for every risky sign-in?
No.
By default it opens none.
Arm a response rule or set the engine to Live first.