Vigil Alerts

For internal IT teams and managed service providers

Microsoft 365 monitoring,
on your own server.

Alerts for suspicious sign-ins, inbox rule changes and external forwarding. Self-host it, or have a dedicated installation hosted for you.

[01]What we monitor

What Vigil watches in Microsoft 365.

Three places where a misused account leaves a trace. Each alert arrives with the context needed to begin an investigation.

01Inbox rules
New inbox rulefinance@example.com
Subject contains “invoice”Condition
Move to RSS Feeds, mark as readAction
Forward to an external addressFlagged

Inbox rules and forwarding

Identify newly created or modified inbox rules that delete, move or hide messages, and spot forwarding to external addresses.

Inbox rule monitoring
02Sign-ins
Recent sign-insd.reid@example.com
Edinburgh, UK — Office network08:12
Edinburgh, UK — Mobile08:47
Frankfurt, DE — Data centre IPUnusual

Suspicious sign-ins

Review suspicious sign-in activity with the user, IP address and location context needed to begin an investigation.

Sign-in monitoring
03Permissions
Permission changesdirector@example.com
Calendar delegate addedYesterday
Full Access permission grantedFlagged
Sign-in from a new device09:02

Mailbox permissions

Bring mailbox delegation and permission changes into view, alongside the other signals affecting an account.

Microsoft 365 monitoring
[02]How it works

Vigil watches.
Your engineers decide.

Monitoring, without automatic changes. Vigil doesn’t change settings in your tenant on its own. It shows your team what happened and leaves the response to them.

01

Investigate with context

Follow the activity behind an alert before deciding on a response.

02

Keep collecting, even when snoozed

Pause a user’s notifications while events continue to be recorded for review.

03

Build a consistent review process

Give engineers a shared place to assess security signals across customers.

One mailbox, one working day

Event recorded Alert raised Notifications snoozed
Snoozed, still recording
08:0010:0012:0014:0016:0018:00
[03]Deployment and pricing

Run it yourself, or have it run for you.

Starting prices cover up to 250 monitored users, with plans up to 2,500. Prices exclude VAT.

Self-hosted

On your own server
From
£49per month

Install Vigil on a server you control. Your team manages the operating system, access, backups and updates.

Runs on your own infrastructure Deployment support available Up to 250 monitored users
View self-hosted plans

Dedicated hosting

Hosted for you
From
£149per month

A separate server and Vigil instance for your organisation. Hosting location, maintenance, backups and support are agreed in your proposal.

Your own server and instance Hosting location agreed with you Up to 250 monitored users
Request a proposal

Managed service provider?

One installation can serve multiple customer tenants, so every client is reviewed the same way.

Talk to us about MSP use
[04]Case studies

What teams found once Vigil was running.

All case studies
St Johnstone FC Suspicious sign-ins

Data centre sign-ins to a rarely used account, flagged ten minutes after deployment.

Read the case study
Binn Group Inbox rules

Unusual activity and new inbox rules on a director’s account, ending in a full account reset.

Read the case study
[05]Questions

Questions, answered.

Anything else, we’re happy to go through it with you in a demo.

Request a demo
Internal IT teams and managed service providers who monitor Microsoft 365 for their own organisation or for their clients.
[06]Guides

Guides for when something has already happened.

Practical steps for the hours after an alert.

See Vigil in a live demo.

We’ll walk through alerts, investigation and deployment, and answer questions about your environment.

Request a demo How buying works