Who sees it at 2 a.m. on a Saturday?
Most school and mid-market IT teams own the right tools: EDR on endpoints, a firewall, Microsoft 365 or Google Workspace, and an identity provider. What they rarely have is someone watching all of it, together, after hours.
This self-check shows where your coverage holds on its own, and where it depends on someone being at a desk.
- About 10 minutes
- Built for teams of 1 to 10 IT staff with little or no dedicated security headcount
- Not a grade: a clear picture of your after-hours coverage

Visibility
Would someone see an account misbehaving tonight, including in Microsoft 365 or Google Workspace and on devices that don't run an agent?

Signal and correlation
Do your tools tell you what to look at first, and connect related alerts across identity, endpoint and network?

Response and evidence
Can a threat be contained at night, and can you show your leadership exactly what happened afterward?
