Posture pillars
The six areas a customer's security posture is measured across, where each one's status and ideal-state percentage come from, and what "not monitored" means.
Updated
On this page
RevoSecure sums up each customer's security in six pillars. Each pillar draws only on the modules the customer actually uses, so a pillar is never scored from data you don't have. They appear on the customer's Overview (one tile each) and on Home (each pillar across customers, and one column per pillar in Customer health).
The six pillars
| Pillar | Modules | What it covers |
|---|---|---|
| Identity | Microsoft 365, dark web | MFA and sign-in strength, admins, Conditional Access, data sharing, breached and stolen credentials |
| Endpoints | Devices (RevoAgent) | Vulnerabilities in installed software, patching, endpoint hardening, network and Active Directory checks |
| Email & domain | External assessments | SPF, DKIM, DMARC and other mail and DNS findings |
| External surface | External assessments | Websites, TLS, exposed services and the rest of the internet-facing footprint |
| Code & cloud | Code & apps | Vulnerable dependencies in repositories and SBOMs |
| Protection stack | Devices, ThreatLocker | Antivirus/EDR state, malware, security events, application control |
Status and ideal-state percentage
Each pillar shows two things:
- Status: critical, needs attention, good or no data. It's the worst status of the underlying areas of the security overview, with the same rules RevoSecure uses everywhere else; nothing is recalculated in a different way.
- Ideal state %: how many of the pillar's ideal-state controls are met, using exactly the rows the Compliance page shows. A pillar made of one compliance area shows that area's number, and the overall percentage on the Overview is the Compliance page's.
Click a pillar to open the area behind it in the customer's workspace. Its tile also lists the next actions and the controls that aren't evaluated yet.
Not monitored and partly monitored
- A pillar whose modules are all inactive is Not monitored, with a Set up link. It's never shown as 0% or 100%: missing data isn't a result.
- A pillar with some of its modules missing is Partly monitored, and names what's missing (for example ThreatLocker for the protection stack). The link goes to that module's setup page.
The Overview's What's missing from this picture lists the coverage gaps that leave the picture incomplete, such as devices without recent data or checks that couldn't run.
Score, grade and risk level
The pillars don't replace the headline numbers:
- the security score and grade come from open findings (see Severity, risk and the security score);
- the risk level (critical, high, elevated, low) summarises the areas behind the pillars (see Risk levels).
Controls left out of the customer's ideal state don't count anywhere. See Insights for the problems RevoSecure explains by joining modules, and Related context for the same on one record.