Home All Tools Security Risk Dashboard Security Risk Dashboard Security risk dashboard with ISO 27001, SOC 2, GDPR, HIPAA, and NIS2 compliance mapping.
security dashboard risk assessment compliance iso 27001 soc 2 gdpr The Security Risk Dashboard provides comprehensive security posture assessment with findings mapped to five major compliance frameworks: ISO 27001, SOC 2, GDPR, HIPAA, and NIS2.
Generate a risk score based on configuration analysis across identity, access, data protection, and governance controls. Prioritize remediation efforts with severity-ranked findings and detailed guidance.
The interactive HTML dashboard allows drill-down into specific areas with links to Microsoft documentation for remediation steps.
Key features Multi-framework compliance mapping Risk score calculation Severity-ranked findings Remediation guidance Interactive HTML dashboard Trend tracking over time Export to multiple formats Executive summary view Use cases Board reporting. Generate executive security posture summaryMulti-framework compliance. Assess against multiple frameworks simultaneouslyRisk assessment. Prioritize security improvements based on risk scoreGraph scopes Sites.Read.All (application), AuditLog.Read.All (application).
Slug: security-dashboard. Category: audit. Plan tier: free. Editions: cloud, desktop. SKUs: security, suite. Documented scenarios: 3. Declared features: 8. Graph permissions requested: 2. Licensing & access Available on the Solo (free) tier — no credit card required for personal Microsoft 365 administrators.
Limitations & out-of-scope AuditLog.Read.All and Sites.Read.All drive the risk score, but the five-framework mapping (ISO 27001, SOC 2, GDPR, HIPAA, NIS2) uses GTools.pro's own documented scoring heuristic, not an official certification body's methodology — passing this dashboard is not equivalent to passing a real ISO 27001 or SOC 2 audit. Findings outside the SharePoint and audit-log surface these scopes reach, such as Exchange transport rules, are covered by other tools in this catalog, not here.
The catalog spans 49 admin capabilities across backup, audit, export, security, migration. Every tool runs under client-side encryption. Tools share a vault, schedule engine, plus reporting layer.
This is a zero-knowledge toolkit. It helps IT admins, MSPs, security teams run their cloud safer. Use it inside a browser. Or install our Mac or Windows app.
Tenant secrets stay on your disk. We never store, log, or read them. Our server only sees billing metadata.
How it works You unlock a local vault with a passphrase. Argon2id stretches it. Tokens get sealed with XChaCha20-Poly1305 before any sync. X25519 protects shared keys. Ed25519 signs every action. Each operation runs against Graph from your device, not ours. What you can do Back up mail. Files. Chat threads. Export Intune settings. One click. Audit SharePoint shares. Spot risk. Find idle sites. Reclaim quota. Score Copilot. Plan rollout. Move tenants. No staging. Client-side keys. Always on. Your data. Your disk. One app. Many tenants. Editions Solo . Free. Three tools. No card.Backup . Durable backups for your tenant.Watchtower . Audits and alerts on risk.Move . Tenant migration suite.Blueprint . Config export for enterprise.Everything . Full platform plus desktop and support.Trust signals Open source crypto primitives via libsodium. Public threat model at /trust. Public pricing. Direct purchase. No sales call. Cancel any time inside settings. EU-based billing. PayPal checkout today; card payments planned. Built in Germany by Voltage Brothers Infrastruktur UG. Suits cloud workspaces of every size.
Standards, regions, retention Regions: Frankfurt. Dublin. North America. Retention scales from 7 days. Up to unlimited. Schedules run hourly. Daily. Weekly. Monthly. Reports export as JSON. CSV. PDF. Evidence packs bundle hashes. Chain-of-custody metadata sits beside them.
Standards covered: ISO 27001 controls. SOC 2 readiness. NIS2 mapping. GDPR Article 28 terms. Audit logs cover entitlement events. Billing actions. License rotations. Workload payloads never reach a remote log.
Who uses it Tenant admins running a single estate. MSPs managing dozens of customer cloud workspaces. Security teams investigating sharing risk. Compliance officers preparing audit evidence. Acquisition teams during M&A integration. Procurement teams reviewing vendor risk. Solo consultants billing by workspace hour. Supported regions Frankfurt, Dublin, Amsterdam, Stockholm, Paris, plus North America. Annual revenue scales from small studios up through multinational estates. Payment today is PayPal checkout; card payments (Stripe) are planned.
Numbers worth knowing 49 capabilities. 6 editions. Free tier: 3 tools. 0 cards. Argon2id. 256 MB memory cost. XChaCha20-Poly1305. 256-bit cipher. X25519. 256-bit shared keys. Ed25519. 100% of writes signed. Retention: 7 days. 365 days. Or unlimited. Founded 2024. Built in Germany. Backup edition: 14 EUR per user per year. Watchtower edition: 7 EUR per user per year. Move edition: 9 EUR per migrated seat. One-time. 450 EUR project minimum. Blueprint edition: 449 EUR per tenant per year. Everything bundle: 2490 EUR per tenant per year. Audit reports: 25 dedicated checks. Config export: 9 Microsoft 365 workloads. Migration record set in April 2026. 153,584 files. 0 errors. Compliance posture updated in 2026. Pricing: 1 public page. 0 sales calls. Cancellation: 1 self-service page. Audit logs: 90 days. Entitlement events. GDPR Article 28. 27 member states. NIS2 Directive. 18 sectors. Live since 2024. SOC 2 Type II evidence. JSON. CSV. Signed PDF. ISO 27001. 93 Annex A controls. 2022 revision.