Tier board with explained decisions
See every asset in its tier and exactly which signal put it there - and move it with one drag.
Purpose
A tier that nobody can explain is a tier nobody trusts. Teams need to see why an asset is Tier 0 before they act on it.
Design
The tier board shows assets in tier lanes, each card saying what set its tier - a rule, installed software, a privileged logon, an Entra role, an API permission, an AD group, an Azure role or a tag. Click a source in a lane to show only the assets it set. Dragging an asset or a rule to another lane stages the change with a reason; it is written only after review.
Business opportunities
Transparent, defensible criticality decisions that security and asset owners can agree on, with an audit trail for every change.
Related features
Asset profiling across endpoints, identities, Azure and public IPs
One profile per asset - device, identity, Azure resource or public IP - built automatically from the data you already have.
One asset, every source: cross-source correlation
A server seen by Defender, as an Azure VM and in Active Directory becomes one CI with one history.
Privilege tier catalog
Every role and permission in your tenant ranked by what an attacker could do with it - Tier 0 to Tier 3.
Fifteen views of every collection
Raw rows, correlated CIs, vulnerabilities, risk, MITRE, compliance, CVSS, exemptions, lifecycle, what changed, connector changes and services - for any collection.