Where to start
Begin here when you need to protect and recover access. Stay with the domain, relationship or service state named on the page; the task does not widen silently into a different security or product claim.
Product help
Use the least privileged workspace role, enrol a verified MFA factor where required, review active access and report suspicious account activity through the security route.
Bounded collection. Explicit permission. No exploitation or authentication attempts.
What to do
Each guide takes you from the current screen or state to one safe, testable outcome. This page helps you protect and recover access. The relevant evidence, owner and limit remain available from the same route.
Useful for: account user · security administrator.
In practice
Begin here when you need to protect and recover access. Stay with the domain, relationship or service state named on the page; the task does not widen silently into a different security or product claim.
Portfolio and MSP workflows separate tenants, domains, responsibility and delegated access. Open the relevant report evidence when you need to verify the source, observation time, attribution or qualification behind it.
Complete the step shown on the page, then check the resulting state before moving on. Unknown, unavailable and not-applicable outcomes remain distinct, so absence is never presented as a successful or reassuring result.
Contact support with the correlation reference, never credentials or secret values. Record the resulting owner, evidence or recovery state where the product provides it, so another person can verify what happened without repeating the task.
What you can rely on
Confirm the workspace, domain and evidence state before completing a task.
Portfolio and MSP workflows separate tenants, domains, responsibility and delegated access.
The page explains only what the current service state can support.
Unknown or unavailable information remains visible rather than being treated as a positive result.
Important boundary
Account security supports one defined outcome: protect and recover access. Domain Signals is not a penetration test, certification, data-residency assessment or prediction of breach likelihood. Missing evidence is not evidence of safety.
Questions answered
This page helps you protect and recover access.
Domain Signals keeps the source, observation time and evidence state alongside each conclusion. The relevant report view provides the technical detail when you need to inspect it.
Account security supports one defined outcome: protect and recover access. Domain Signals is not a penetration test, certification, data-residency assessment or prediction of breach likelihood. Missing evidence is not evidence of safety.
Keep exploring