Read-only by design, careful by default.
A security tool sees a lot about your business. Here is exactly what Vikelus reads, what it never does, and how your information is protected.
It watches. It never changes anything.
Vikelus has read-only access to your Microsoft 365 and to the tools F1 uses to manage and protect your devices. It cannot install updates, isolate a device, change a setting, add or remove a user, or touch your mail. Fixes are made by F1's technicians, and Vikelus checks afterwards that they worked.
There is one exception, and we want you to know about it. For Microsoft 365 accounts without Microsoft's premium licence, Vikelus switches on Microsoft's own audit log feed once, so that sign-ins can be watched. It changes nothing else.
Only what it needs to find weak spots.
- Device names, health, protection status, installed programs and their versions, and patch status.
- Microsoft 365 security settings, user accounts and admin roles, app permissions, inbox and forwarding rules, and the sign-in and change logs.
- Public information about your website and email domains, the same that anyone on the internet can see.
It does not read the contents of your email, files or documents. The outside checks store public settings, counts and file paths only, never page contents or mailbox addresses. Sign-in records are kept for 90 days.
F1's team, and nobody else.
Only F1 staff can sign in to Vikelus, and every action they take is logged: who looked at what, and when. Your data is never sold. The public vulnerability lists Vikelus uses are only downloaded; nothing about your business is sent to them. To check your website and email, Vikelus looks up your domain names, which are public already, with reputation services. Nothing else about your business is sent.
A dedicated server in the European Union.
Vikelus runs on a dedicated server in the European Union, used only for Vikelus. Its backups are encrypted. Monthly snapshots are kept for 13 months so that reports can be compared and every number traced back.
It supports your obligations. It doesn't replace them.
South Africa's Protection of Personal Information Act (POPIA) requires you to keep personal information secure. Vikelus helps by showing where your systems are weak and proving what was fixed, month by month.
No tool makes a business compliant on its own: that also depends on your policies, your people and your processes. F1 can help with those too.
Fixed rules, calculated numbers, a person in the loop.
Vikelus uses no AI model. Findings come from matching your software against public vulnerability lists and from fixed security checks. Reports are written from fixed templates over calculated numbers, and an F1 engineer reviews each one before you get it.