Overview
Fleet health and threat activity across your organisation.
…
Loading
Threat activity · last 30 days
today
Most-hit hosts
Loading…
Latest incidents
Open Incidents →
Loading…
Incidents
Flagged security events across your workspaces. Review, resolve, and open the forensic detail. Only pages the extension flagged are ever recorded.
Users dashboard
Who is protected, where, on what — with per-workspace and per-tenant breakdowns.
Loading…
Incidents dashboard
Threat activity over time, by category, workspace and tenant; the hosts and people involved.
Loading…
AI usage
Which AI platforms people use, whether they are sanctioned, and how often your warning was shown, accepted or a platform was blocked. Counts only: no prompts, pasted text or page addresses are ever collected. Turn it on under Policies → AI governance.
Loading…
Password logins
Sites where members sign in with a password of their own instead of your identity provider: the applications used without single sign-on, and where the work password was reused. Hosts and counts only; no usernames or passwords are collected.
Loading…
Policies
The browser-security policy set for one workspace. Pick a workspace, edit, save — every protected browser in it picks the change up on its next poll.
Threat feeds
Bring your own threat intelligence. Each feed is read on the schedule you choose and every new malicious URL it lists is added to your blocked list, so it is blocked in every workspace of this organisation.
MSP overview
Every organisation you administer on one screen: seats, open incidents, threat feeds, connectors and response rules. Read-only; open an organisation to act.
Loading…
Response actions
Connect the systems that can act on a confirmed incident, then decide which incidents trigger which action, automatically or when an analyst clicks Confirm issue. Every action is logged and most can be undone.
Loading…
Block/Unblock URLs
Organisation-wide block and allow lists, applied to every protected browser within minutes. Blocked entries can also be reported to SafeToOpen’s global intelligence.
Workspaces
A workspace is an isolated policy set — a customer, a department, or a domain. MSPs run one per tenant. Each has its own incident-alert recipients and analysts.
Your workspaces
Loading…
People
Everyone protected under your plan: invite members (one at a time or by CSV), promote co-admins, assign workspaces, and keep membership in sync with Microsoft 365.
🏢 Microsoft 365 / Azure AD
Sync members from one or more Microsoft 365 tenants — each connection lands in its own workspace
Integrations
Feed Browser Security events into SIEMs and ticketing tools — pull with export tokens, push with signed webhooks.
Setup guide ↗ ·
ServiceNow ·
Jira ·
API reference
Loading…
Incidents Email Security
Dangerous and suspicious emails the add-in caught, executive-impersonation alerts, and messages your people reported. Sender addresses and subjects are shown as text only.
Incidents dashboard Email Security
Trends across the organisation or one workspace: what the add-in is catching, from whom, and who is being targeted.
Loading…
People Email Security
Everyone covered by your Email Security plan: invite members (one at a time or by CSV), choose Plus or Executive seats, assign workspaces, and keep membership in sync with Microsoft 365.
Microsoft 365 Email Security
Keep Email Security membership in sync with Entra ID (Azure AD) groups.
Loading…
Workspaces Email Security
A workspace groups members — a customer, a department, a region — and can route their phishing reports to its own inbox. Members without a workspace use the organisation default.
Loading…
Loading access & alerts…
Loading policies…
Activity log Email Security
Every administrative change to your Email Security plan, with who made it and when.
Response actions Email Security
Connect the systems that can act on a confirmed incident, then decide which incidents trigger which action, automatically or when an analyst clicks Confirm issue. Every action is logged and most can be undone.
Loading…
Google Workspace Email Security
Import people from Google Groups. Map groups to workspaces and seat types; members are added, moved and removed as the groups change. Polled hourly, or sync on demand.
Loading…
Settings Email Security
Organisation name, where user reports go, and whether new members are emailed.
Loading…
Activity log
Every administrative change — policies, URL lists, workspaces, members, access grants, integrations, triage decisions — with who did it and when.
| Event | Description | By | Date & time |
|---|---|---|---|
| Loading… | |||
Settings
Business profile, incident-alert recipients, seats and billing. Nothing here applies to personal or family plans.