Posture score
82/100
▲ 6 pts / 90d
Open vulnerabilities
89
C1 · H7 · M28 · L53
Active alerts
6
1 critical · 1 high
Endpoints monitored
214
across 3 campuses
Uptime (30d)
99.98%
SLA 99.9% ✓
MTTR
1h 47m
MTTD 38m
Alerts over time14 days · 1.24M events
Vulnerabilities by severity
89open
Critical 1
High 7
Medium 28
Low 53
Monitored systems7 services
Student information system99.99%
Parent portal & app99.97%
Public websiteTLS warning
Microsoft 365 / Entra ID100%
VPN gatewayIncident
Campus Wi-Fi (B)Degraded
Backup / DR99.99%
Recent alerts & incidents11 in last 24h · 5 open
| Severity | Alert | Asset | Status | Detected |
|---|---|---|---|---|
| CRITICAL | Unpatched CVE-2025-55182 RCE · CVSS 10.0 | web-srv-01 | Open | 2m ago |
| HIGH | Suspicious login · impossible travel (Paris → Lagos) | M365 / Entra ID | Investigating | 14m ago |
| HIGH | Brute-force blocked · 412 failed SSH | vpn-gw-01 | Resolved (auto) | 1h ago |
| MEDIUM | Outdated TLS 1.0 on parent portal | portal-prod | Open | 3h ago |
| MEDIUM | Phishing email reported by staff | mail / user | Triaged | 5h ago |
| LOW | Password spray detected | Entra ID | Monitoring | 8h ago |
Compliance: GDPR compliant · ISO 27001 in progress
Last penetration test: 12 May 2026
Continuous scanning · last scan 2h ago
Incidents
9 incidents · 5 active · MTTR 1h 47m · 1 SLA breach
Active incidents
5
1 critical · 2 high
Mean time to respond
1h 47m
within SLA
SLA breaches (30d)
1
critical RCE
Closed (30d)
18
MTTC 6.4h
| ID | Severity | Title | Asset | Status | SLA | Detected |
|---|
Sorted by detection time · newest first
Alerts
Real-time detection feed · 11 alerts in last 24h
Alerts (24h)
11
1 critical · 3 high
Events ingested (24h)
1.24M
12 sources healthy
Auto-resolved
4
no analyst action
False-positive rate
18%
target < 30%
| Severity | Alert / detection | Source | Asset | Technique | Status | Detected |
|---|
Stream updates every 30s
Threat hunting
Proactive search across 1.24M daily events · KQL
Saved hunts
| Time | Entity | Source | Detail | Technique | Risk |
|---|
Add matching events to an incident as bookmarks
Vulnerabilities
89 open findings · authenticated continuous scan · last run 2h ago
Open findings
89
C1 · H7 · M28 · L53
Exploitable
6%
known exploited: 2
Remediated (30d)
134
▲ trending down
Mean age (open)
12d
critical: 0.1d
Patch SLA
91%
on time
| CVE / ID | Title | Severity | CVSS | VPR | Asset | Status | Age |
|---|
CVSS v3.1 · VPR (Vulnerability Priority Rating)
Assets
214 monitored assets · 3 campuses · 100% agent health
Total assets
214
100% reporting
Endpoints
179
laptops 138 · labs 41
Servers
14
+ cloud tenant
Network / infra
21
FW, VPN, Wi-Fi
Critical assets
6
tier-0
Agent health
100%
all checked-in
| Host | Type | OS / platform | IP | Criticality | Agent | Open vulns | Risk | Last seen |
|---|
Risk score 0–1000 (Rapid7 model)
Pentests & VAPT
Engagement history · last test 12 May 2026 · 7 findings open
Last engagement
12 May 2026
web + external infra
Open findings
7
2 high · 5 medium
Remediated
11
re-tested & verified
Next engagement
20 Jul 2026
cloud / M365 review
EngagementsCREST-aligned · OWASP WSTG / PTES / NIST SP 800-115
Compliance
ISO/IEC 27001:2022 · RGPD/GDPR · Cyber Essentials · SOC 2
ISO/IEC 27001:2022In progress
73 implemented · 14 in progress · 6 not started
Stage 2 audit · Sep 2026
RGPD / GDPRCompliant
ROPA, DPIA & DPA on file
DPO review · Apr 2026
Cyber EssentialsCertified
5 technical controls passed
Valid to Mar 2027
SOC 2 Type IIIn progress
observation window open
Report · Q4 2026
ISO/IEC 27001:2022 — Annex A controls93 controls · 4 themes
Mapped to RGPD/GDPR & SOC 2 trust criteria