Risk levels
How RevoSecure decides whether a customer is at critical, high, elevated or low risk, and what "at risk" counts on Home.
Updated
Every customer has a risk level, shown as a badge on its Overview and in Customer health on Home. It summarises the areas of the customer's security overview (vulnerabilities, endpoint protection, patching, security events, identity and Microsoft 365, application control, attack surface, code) together with the security score.
The levels
| Level | When |
|---|---|
| Critical | At least one area is critical |
| High | Two or more areas need attention, or the security score is below 60 |
| Elevated | One area needs attention, or the security score is below 80 |
| Low | At least one area has data (or the customer has a score) and none of the above applies |
| Unknown | No area has data and the customer has no security score yet |
The first matching row wins. An area with no data never counts as good: a customer with nothing connected is unknown, not low.
Customers at risk
The Customers at risk number on Home counts customers whose level is critical or high. It covers active customers and prospects (archived customers are left out). Click it to jump to Customer health, riskiest first.
What moves the level
- Fixing what's in Act now and the critical findings in an area moves that area from critical to needs attention or good.
- The security score changes as findings are resolved or accepted (see Severity, risk and the security score).
- Findings for controls outside the customer's ideal state don't count.
Act now
Act now (on the Overview and on Home) lists the most urgent items first: threat-watch matches, known-exploited vulnerabilities, active malware, tampering signals (an audit log cleared, users added to privileged groups, Microsoft 365 admin role changes), unprotected devices, critical findings, unsupported operating systems and agents that stopped reporting. Each item links to the filtered list where you fix it.
See also Posture pillars.