Most security tools cover one layer. SBCMSP covers four — external, internal, cloud, and compliance — from a single dashboard.
🌐
External Attack Surface Management
673 automated checks run daily against each client domain. SSL/TLS configuration, security headers, DNS email security (SPF/DMARC/DKIM/MTA-STS), subdomain discovery, open ports, WordPress/CMS vulnerabilities, API security, injection tests, PII exposure, and more. Findings mapped to all 10 compliance frameworks.
SSL/TLSDNS SecurityHeadersCMS ChecksPort Scanning
📋
Compliance Framework Reporting
Generate audit-ready PDF reports for 10 compliance frameworks in one click — CIS Controls v8, SOC 2 Type II, NIST CSF 1.1, NIST CSF 2.0, ISO 27001:2022, HIPAA Security Rule, PCI DSS v4.0, CMMC 2.0 Level 2, Cyber Essentials, and FTC Safeguards Rule. Each report includes control status, failing findings with remediation steps, and a compliance score using a weighted control pass rate model.
CISSOC 2NIST CSF 1.1NIST CSF 2.0ISO 27001+ 5 more
🖥️
SBCMSP Agent
Deploy the lightweight SBCMSP Agent to client Windows machines. 200 checks across 14 modules covering: BitLocker encryption, Windows patching, Active Directory hardening (KRBTGT age, stale accounts, unconstrained delegation), SMB signing, backup status (Veeam, VSS), TLS Schannel configuration, LAPS deployment, and much more. Results appear alongside external scans in the dashboard.
BitLockerAD HardeningBackup StatusPatching
☁️
M365 / Entra ID Assessment
Connect via Microsoft Graph API to assess tenant-wide cloud security posture. MFA registration status across all users, legacy authentication blocking, Conditional Access policy coverage, Global Admin count, guest user review, audit log status, Microsoft Secure Score, and Privileged Identity Management. One connection covers the entire M365 tenant.
MFA StatusCA PoliciesSecure ScoreAdmin Roles