Version 3.5 – The New Griffin31
The New Griffin31 Is Here
Section titled “The New Griffin31 Is Here”Griffin31 version 3.5 replaces the previous portal with a new interface built around one question: what should I fix next?
- Threats: see the real-world attacks that target Microsoft 365, step by step, and how well your tenant blocks each one.
- Evidence: see the data behind every result, so you know exactly what to fix and where.
- Decisions for audit cycles: approve or exclude a recommendation with a reason and an expiry date, so it comes back for review every month, quarter or year.
What’s New
Section titled “What’s New”1. A New Interface
Section titled “1. A New Interface”Simpler navigation, cleaner pages, and information ordered by what to fix first. Take the tour to see where familiar features moved.
2. Threats: Know What to Fix First
Section titled “2. Threats: Know What to Fix First”A new page showing real-world attacks on Microsoft 365, such as account takeover, ransomware and phishing. Instead of reading a threat report and asking “are we exposed?”, you see the answer for your tenant.
- A visual attack path: every stage of the attack, following the MITRE ATT&CK kill chain, with how many of your checks cover each stage.
- How much is mitigated: each threat shows how much of it your settings already block. Sort by Least mitigated to see where you are most exposed.
- The fixes that matter most: each stage lists the recommendations that block it. On the dashboard, Fix these first ranks the failing recommendations that appear in the most threats and stories, so every fix closes more attacks.
- Threat intel: the threat actors, public sources and CVEs behind each threat.
3. Evidence: The Proof Behind Every Result
Section titled “3. Evidence: The Proof Behind Every Result”Every recommendation now shows the data its result is based on: which users, policies, devices or settings meet the requirement, and which don’t.
- No more “Failed” without an explanation. See exactly what to fix and where.
- After a fix, see the change on the next scan.
- Proof ready to show auditors, management or customers.
4. Review, Approve and Exclude, on Your Audit Cycle
Section titled “4. Review, Approve and Exclude, on Your Audit Cycle”Clear states that show who decided what:
- Passed Partial Failed: checked automatically by Griffin31
- Not reviewed: needs a person to check it
- Approved: a person on your team checked it and marked it OK
- Excluded: left out on purpose, such as a third-party tool or an accepted risk
Each decision has a reason, an optional note, and an Active until date: 1 week, 1 month, 3 months, 6 months, 1 year, or a date you choose. When it expires, the recommendation is checked again, so approvals and exclusions are reviewed on the same cycle as your audits. Every decision is kept in the recommendation’s History and in Recent activity, with who made it and when: a ready audit trail.
Ready-made views (All, Needs action, Quick wins, Bonus pending) and your own saved views get you to the right list in one click. Remediation steps now follow one clear format across every recommendation. Learn more
5. A New Dashboard
Section titled “5. A New Dashboard”Your score, what needs attention, Quick wins with the points they add, Fix these first, your score over time, and audit readiness for each framework, all on one page. Learn more
6. Cases
Section titled “6. Cases”Your personal queue of recommendations assigned to you to fix or review. This is the first step toward a full case and ticketing system, with more features on the way. Learn more
7. Stories and Compliance
Section titled “7. Stories and Compliance”Stories group recommendations by security goal, with your progress on each, including new stories for AI agents, audit readiness and insider data theft. Compliance shows each framework’s controls with the recommendations, and their Evidence, behind them. Stories · Compliance
8. Connectors
Section titled “8. Connectors”See every service Griffin31 reads your settings from, and its status. Admins can turn a connector off to hide its recommendations, and back on any time. Learn more
9. Policies, Messaging Center and Recent Activity
Section titled “9. Policies, Messaging Center and Recent Activity”- Policies: all alert settings in one place, each with its own recipients. Learn more
- Messaging center: messages from Griffin31 about your account and your tenant. Learn more
- Recent activity: one timeline of recommendation changes and Governance events. Learn more
10. Users & Roles
Section titled “10. Users & Roles”A new Reader role for people who only need to view, and the account owner can no longer be removed by mistake. Learn more
New Checks
Section titled “New Checks”In the last two months we added more than 25 new recommendations, most of them for AI agents and Copilot: who owns each agent, which tools and models it can use, and how it is covered by Conditional Access. Others cover Microsoft Purview audit, data protection and insider risk. New real-world threats joined the Threats page too.
Inside Griffin31, the What’s new story lists every new recommendation with its result in your tenant.
We Raised the Bar
Section titled “We Raised the Bar”We updated our checks to follow the latest Microsoft and CIS security guidance, added new recommendations, and refined how the score is calculated.
As a result, your score may change. The change reflects a higher standard, not necessarily a change in your tenant. Every gap comes with Evidence that shows exactly what to do. Read more
Coming Soon
Section titled “Coming Soon”- Accept as is: lock the current state of a partial or failed recommendation you’re comfortable with, and get alerted if it gets worse
- Evidence change alerts: know when a user, policy or setting behind a result changes
- More Governance rules: detection of more sensitive changes in your tenant
- SIEM integration: pull Griffin31 data into your own systems through an API
- And more
Questions? Contact us at support@griffin31.ai.