Security
Early accessRisky Sign-in Alerts
Soon after Microsoft flags a risky sign-in to your organisation: what happened, in plain words, and what to check.
Have an account? “Use this agent” adds it to yours once you've signed in.
What it does
Know about a suspicious sign-in while it still matters. Whenever Microsoft Entra ID flags a sign-in to your organisation as medium risk or higher, Risky Sign-in Alerts looks at that sign-in and at the person's recent history, and sends you a plain explanation: who it was, where they signed in from and to which app, whether it worked, what's unusual compared with their usual pattern, and a short checklist of what to do, most urgent first. You can choose to hear only about high-risk sign-ins, or about every level. It only reads and never changes anything in your directory. Risk levels come from Microsoft Entra ID P2, so your organisation needs that licence, and the account you connect needs permission to read sign-in activity, such as the Security Reader role.
- An explanation usually within minutes of a risky sign-in
- Says what happened in plain words
- Compares it with the person's usual sign-ins
- A clear checklist of what to do, most urgent first
- Only reads — never changes anything in your directory
- Needs Microsoft Entra ID P2 to see risk levels
Early access means it works and we use it ourselves every day. It's still moving, so bits of it will change. When it lets you down, tell us — that's the deal.
What it needs
It needs one app from each line below, connected before you add it, because it starts watching as soon as it's set up.
How it runs
When it runs
Whenever this happens: Microsoft Entra ID flags a sign-in at your organisation as risky. You can change what it waits for.
Where results go
By email · On its own page · To your phone
In your apps
It only reads what's in your apps. It never sends, books or changes anything in them.
Make it yours
Your copy, set up your way.
- Give it a name of your own
- Change what it does, in your own words
- Choose where its results go
- Switch it off and on whenever you like
- Change what it waits for
More ready-made agents
Put one to work for you.
Join the waitlist. Once you're in, adding a ready-made agent takes a couple of taps.