Everything you need to run Soviron.

What Soviron is

Soviron watches the security posture of the domains and Microsoft 365 tenants you care about, and tells you the moment something slips. It runs checks on a schedule and raises an alert when one catches a problem, so you find out about an expiring certificate or a missing DMARC record before your customer does.

Everything Soviron does is read-only. There is no agent to install on anyone's computer and nothing to configure on the systems being watched. Soviron looks at what is publicly and API-visible, records it, and compares it over time. It covers three areas:

• Domain health - SSL certificates, uptime and reachability, DNS and mail records, email authentication (SPF, DKIM, DMARC), and domain registration expiry.
• Microsoft 365 posture - administrator role changes, multi-factor authentication coverage, and license usage across a connected tenant.
• Backups - a heartbeat check that alerts if an expected backup signal stops arriving.

Soviron is built for detection on a next-business-day rhythm, not real-time on-call. It is the early warning system that tells you what needs attention and when.

Account types

There are two ways an account is set up, depending on whether you manage security for one business or several.

The guides below use the operator view in most screenshots because it shows the full picture. If you have an individual business account, you will see the same client dashboard without the "All clients" layer above it.

Finding your way around

Operator accounts open on the command center: a set of headline counts across the top, an alert queue in the middle, and a card per client at the bottom. It is designed so you can tell in one glance whether anything needs you today.

Selecting a client opens that client's own dashboard, with a left sidebar for each monitored area (SSL, uptime, DNS, email security, domain expiry, Microsoft 365, domains, reports, and notifications). The top of the dashboard summarizes the client's posture, with a Needs Attention list, recent activity, and what is expiring soon.

The account menu in the top right holds your profile, plan, settings, a link to this help center, in-app support, and sign out.

Adding domains

Open a client and go to Domains. Enter a hostname such as example.com or mail.example.com and choose Add domain. Soviron begins checking it for SSL health, uptime, and DNS records right away, and the row fills in as the first checks complete.

You can add both apex domains and subdomains. Add the specific hostnames you want watched: a marketing site, a client portal, a mail host. Each one is checked independently.

Domain profiles

Not every domain does every job. A parked domain has no website to check; a mail-only domain has no site but still needs its email records watched. The profile on each domain tells Soviron which checks make sense, so you are not warned about a missing website on a domain that was never meant to have one. Soviron auto-detects the profile and you can override it; your choice sticks.

Checks that do not apply to a profile are left out of the health totals, so a mail-only domain never counts as "unhealthy" for lacking a website.

SSL certificates

The SSL Certs area lists every monitored website's certificate, who issued it, and when it is due to renew. Soviron tracks the time remaining and warns you as expiry approaches, so a lapsed certificate never takes a site offline by surprise.

A certificate in good standing shows Good and moves to a warning state as its renewal window closes.

Uptime

Soviron checks each address every few minutes to confirm it is reachable, and records the response time. The Uptime area shows current status, the uptime percentage over the measured window, average response time, and when it was last checked.

Uptime distinguishes between two kinds of trouble, because they mean different things:

A site that is up but throwing errors is a real problem your customer will notice, so Soviron treats that error state separately from a site that is fully down, and alerts on it.

DNS & mail records

DNS records tell the internet how to find a website and where to route its email. If they change unexpectedly, something is wrong: a misconfiguration, a lapsed service, or in the worst case a hijack. Soviron records each domain's A/AAAA address, mail (MX) hosts, and nameservers, and watches for unexpected changes.

You can re-run these checks on demand with Check all, and each row has quick actions to re-check or mute it.

Email security (SPF, DKIM, DMARC)

SPF, DKIM, and DMARC records protect a domain from email spoofing and phishing. Without them, anyone can forge messages that appear to come from that domain. Soviron reads all three for each mail-bearing domain and shows where protection is incomplete or unenforced.

Each record is evaluated on its own:

• SPF - lists which servers may send mail for the domain. Soviron shows the published record and flags if it is absent.
• DKIM - a cryptographic signature on outgoing mail. Soviron checks the common selectors; a domain using a custom selector may show "not found at common selectors" even when DKIM is in place, which is why the wording is precise rather than alarming.
• DMARC - the policy that ties SPF and DKIM together and tells receivers what to do with mail that fails. A missing or monitor-only (p=none) policy means protection is not being enforced.

The Posture column gives the overall read for the domain, for example "Email protection incomplete or not enforced," so you know at a glance whether a domain needs work.

Domain registration expiry

A domain's registration is separate from its SSL certificate, and letting it lapse is far more damaging: the whole domain stops working and can be lost. Soviron tracks each registration's expiry date and registrar, and alerts when a domain is within 30 days of expiring.

Tenant posture

Connect a client's Microsoft 365 tenant and Soviron watches three things that matter most for a small business's security posture: who has administrator access, how many accounts have multi-factor authentication, and how the paid licenses are being used.

Administrator accounts

Soviron records a baseline of who holds privileged roles across a curated set of the most sensitive administrator roles, then watches for changes. If someone is granted or removed from an admin role after the baseline, it surfaces as a change to review, with a full change history. "No role changes detected since the baseline" is the healthy state.

Multi-factor authentication

The MFA card shows how many licensed users have MFA registered. Coverage is what protects accounts from stolen passwords, so anything short of full coverage is worth reviewing. You can mark specific accounts as intentionally excluded (a service account that genuinely cannot use MFA, for example); excluded users are removed from both sides of the coverage math, so the percentage reflects the accounts that actually should be covered rather than being permanently dragged down.

License usage

This card shows how many paid licenses are assigned versus purchased, per plan, and flags unused seats. Unused licenses are money spent for nothing, so this is as much a cost check as a posture one.

The alert queue

The alert queue is the heart of the operator view. It gathers every open finding across all your clients into one list, ordered so the most serious sit at the top. Each row shows the severity, which client and asset it concerns, what happened, how long it has been open, and its status.

The queue runs on an asynchronous, next-business-day rhythm: it is a worklist to clear, not a pager. Statuses tell you what kind of problem each row is:

Hovering a row reveals its actions. Acknowledge marks that you have seen a finding and are handling it; Investigate takes you to the detail so you can dig in.

Marking findings intentional

Sometimes a finding is a deliberate choice, not a problem: a domain that intentionally has no DMARC policy, or an account that genuinely cannot use MFA. Rather than have it nag forever, you can mark it as intentional. Soviron stops alerting on it, records who suppressed it and when in an audit trail, and stops counting it against the domain's posture.

Notification channels

Alerts and recovery notices can go out by email and to Slack or Microsoft Teams, in addition to what you see on the dashboard. Set this up under Settings > Notifications.

• Alert recipients receive alerts for all clients by default. Add a distribution list, a ticketing address, or an individual email. Per-client overrides live in each client's own Notifications settings.
• Slack connects with one click through the Connect Slack button.
• Teams uses a Workflows webhook. The steps to create one are shown right on the page: in the Teams channel, open More options > Workflows, choose "Post to a channel when a webhook request is received," name it, then paste the generated URL back into Soviron.

When several channels are enabled, alerts and recovery notices go to all of them at once. Alerts fire once for a new finding, then stay quiet while the posture is unchanged (with a weekly reminder for an ongoing incident), and a recovery notice is sent when the issue clears, so you are told when something is fixed as well as when it breaks.

Reports

Soviron generates PDF reports that summarize a client's posture and activity for a period. There are two formats for two audiences, and you can generate one on demand or schedule it to send automatically.

Choose the period, tick the sections to include (SSL, email security, uptime, domain expiry, DNS and MX, Microsoft 365), and select Generate PDF. Reports pull current posture from live monitoring plus activity from the chosen period; if data for a period is not yet available, the report says so plainly rather than showing a misleading empty result.

Automated reports

Under Automated Reports, schedule a report to send on a recurring basis, for example a Client Summary on the first of every month to your customer's address. Multiple automations per client are supported, and each shows what it covers and when it next sends. Reports carry your own logo when white-label branding is set up (see Report branding).

Two-factor authentication

Add a second layer to your own sign-in under Settings > Security. You will need an authenticator app such as Google Authenticator or Authy. Choose Enable two-factor authentication and follow the enrollment steps; you will be given recovery codes to store somewhere safe in case you lose your device.

Soviron also protects sign-in with rate limiting, and sessions expire on a fixed schedule (a 7-day maximum and a 24-hour idle limit), so an unattended session cannot stay open indefinitely.

Team members

Invite colleagues under Settings > Team. Choose Invite team member and enter their email; they receive an invitation to join your account. From here you can also reset a member's password or remove their access.

Report branding

Under Settings > Company you can upload your logo, which is then used on generated reports so what your customer receives carries your brand, not Soviron's. Accepted formats are PNG, JPEG, or WebP up to 1 MB. With no logo set, reports use Soviron branding.

Plans & billing

Soviron is priced as a simple seat model, managed under Settings > Billing and in the Plan item in your account menu.

A "client" is one business, so pricing scales with how many businesses you actually monitor. You add a payment method when you start, and your subscription quantity tracks the clients and tenants you have connected.

Getting help

If a guide here does not answer your question, open a support case from the Support area. Your cases are tracked in one place, split into Active and Resolved, so you can follow a conversation to its conclusion.

Choose New case, give it a subject, set how urgent it is, optionally tie it to a specific client, and describe what is happening. You can attach screenshots or PDFs (up to 5 MB each) and CC up to five colleagues so everyone stays in the loop. Replies come back by email and are threaded onto the same case.

Soviron aims to respond within 24 hours. If the form ever will not submit, you can email support@soviron.com directly and reach the same place.