See everything.
Change nothing.
Vigil365 watches identity, devices, email and compliance across your Microsoft 365 tenant — collected on a schedule, in one dashboard you host yourself. It reports and recommends, and it only ever reads from your tenant.
Secure Score trend 90d
Defender alerts 33 active
One console for the whole tenant
Vigil365 pulls the signals that are scattered across Defender, Entra, Intune, Exchange and Purview into a single scheduled view — no tab-hopping between admin portals.
Identity & access
Risky users and sign-ins, MFA coverage, privileged roles and PIM, foreign sign-ins — the gaps attackers look for first.
Devices
Intune compliance, non-compliant and stale devices, and Defender for Endpoint alerts — all in one list.
Email threats
Defender for Office 365 alerts by category — malware, phishing, spam — with the threat breakdown and targeted users.
Compliance
DLP, insider-risk and Cloud App alerts, Conditional Access gaps, and attack-simulation results, scored against a baseline.
Alert policies
Metric, activity and anomaly policies with a full acknowledge, snooze, resolve and assign workflow — stored server-side.
Trends & digest
Posture over time from periodic snapshots, plus a scheduled executive digest by email — HTML, CSV and PDF.
It watches. It never touches.
Vigil365 authenticates to Microsoft Graph with app-only permissions and sends only read requests. No code path changes a setting, disables a user, or remediates an alert.
- ✓Read-only Graph calls — every required permission is a read permission. One optional permission, for attack simulation results, is read-write only because Graph has no read-only option for it. Vigil365 reads with it and runs without it.
- ✓Self-hosted — runs on a Windows machine you control, with its database on a server you control. Vigil365 has no cloud service of its own.
- ✓Tamper-evident audit trail — every privileged action in-app is recorded in a SHA-256 hash-chained log.
Running in minutes, not a weekend
One self-contained installer carries the app, the web UI and the .NET runtime. The server needs no source tree, no Node.js and no .NET — just Windows and administrator rights.
Download the installer
Grab Vigil365-Setup.exe from the latest release and run it as Administrator. ~120 MB, nothing else to fetch.
Run the wizard
It registers the Entra app, prepares SQL Server, sets up HTTPS and installs the Windows service — the plumbing is handled for you.
Sign in and go
Open the dashboard, sign in with Microsoft, and the first scheduled collection begins. Real posture data within minutes.
Frequently asked questions
What is Vigil365?
Vigil365 is a free, open-source security dashboard for Microsoft 365. It collects alerts and posture data from Microsoft Defender, Microsoft Entra ID, Intune, Defender for Office 365, Microsoft Purview and Conditional Access on a schedule, every 15 minutes by default, and shows them in one console on a Windows machine you control.
Does Vigil365 change anything in my Microsoft 365 tenant?
No. After setup, its collector only sends read requests (GET) to Microsoft Graph. No code path changes a setting, disables a user or remediates an alert. Setup registers the app in your tenant once, when you sign in as an administrator. Every required permission is read-only. One optional permission, AttackSimulation.ReadWrite.All, is read-write only because Graph has no read-only option for attack simulation results. Vigil365 reads with it and works without it.
What permissions does Vigil365 request?
15 required Microsoft Graph application permissions, granted once with admin consent, and 2 optional ones. Each permission and the feature it powers is listed in the Graph permission reference on GitHub.
Where is my data stored?
Vigil365 has no cloud service of its own. Its database lives on a server you control, and alerts leave that server only through the Teams, email or webhook channels you configure.
Is Vigil365 free?
Yes. It is released under the MIT license, and the source code is on GitHub.
Is there a hosted version?
No. You run Vigil365 yourself, on a Windows 10 or 11 machine or a Windows Server 2019 or later. The installer is a single file of about 120 MB and needs administrator rights.
Put your Microsoft 365
security posture on one screen
Free, open source, and self-hosted. Download it, point it at your tenant, and see what your admin portals have been keeping apart.