Four places attackers look, watched for you.
Vikelus collects what it needs from the tools F1 already uses, from your Microsoft 365 and from the public internet. It reads; it never changes anything. F1's technicians act on what it finds.
Every program, matched against what attackers use.
Every few hours, Vikelus collects the list of programs and their versions on each device F1 manages for you. It matches common business software (browsers, Microsoft Office, PDF readers, archive tools, video calling and remote access tools, and more) against public records of known weaknesses, called CVEs.
- NVD, the US national vulnerability database, says which versions are affected and how severe it is.
- CISA's Known Exploited Vulnerabilities list says which weaknesses attackers are actively using.
- EPSS, from FIRST, gives the chance a weakness will be exploited in the next 30 days.
- Microsoft's security update data covers Windows and Office.
Findings are ranked with the actively exploited ones first, then by likelihood, then by severity, so F1 fixes the riskiest things first. A finding only closes when a later check shows the fixed version is installed.
About 70 checks, and a watch on every sign-in.
Once your administrator grants read-only permission, Vikelus checks your Microsoft 365 every day against recognised security baselines.
- Multi-factor sign-in (MFA), old sign-in methods that bypass it, and admin accounts.
- Guest users, apps with risky permissions, and app consents.
- Inbox rules and mailbox forwarding that send mail outside the business.
- Device compliance, SharePoint sharing and Microsoft's own security alerts.
Every 10 minutes it reads the sign-in log. A successful sign-in from an unexpected country, a correct password stopped by MFA from abroad, or a burst of password guessing is flagged with the place and network it came from. Changes like a new administrator or a mail forwarding rule are flagged too, and F1's team is alerted by email.
Correct password, stopped by MFA
- Account
- reception@example.co.za
- From
- Amsterdam, Netherlands
- Network
- Example Hosting BV
- Seen
- 06:42, within 10 minutes
Example data. Alerts go to F1's team, who act on them.
Checked from the outside, the way an attacker looks.
Once a day Vikelus checks each of your domains using only public information, and grades it from A to F.
- Your website's security certificate (SSL) and its secure connection settings.
- Email spoofing protection: SPF, DKIM and DMARC, the records that stop others sending mail as you.
- Exposed services and files that should not be public.
- Signs of leaked logins, lookalike domains, and whether your domain is on a blocklist.
- Certificate and HTTPS100
- Email and DNS security72
- Website security headers84
- Internet exposure95
Example data.
Every device protected, switched on and up to date.
Vikelus reads the health of the endpoint protection and device management tools F1 runs for you. It checks that every device is protected and has been seen recently, that tamper protection is on and drives are encrypted, that security updates are installed, and that Windows is still supported by Microsoft.
Anything that falls short goes onto F1's list to fix, and into your report when it matters to you.
Vikelus finds it. F1 fixes it. Vikelus checks the fix.
Vikelus finds it
An out-of-date program, a weak setting or a suspicious sign-in, ranked by real-world risk.
An F1 technician fixes it
People act, not software. Vikelus never changes your systems itself.
The fix is verified
A vulnerability only counts as fixed once Vikelus sees the fixed version installed.
It shows in your report
What was fixed, what is still open and what comes next, in plain language.