AuditHat Pulse
Drift
happens.
Pulse logs every change that moves you off the security baseline: who, what, when, and whether it was approved.
- Firewall rules
- Admin & privileged accounts
- MFA & Conditional Access
- Patches
- Backups
- New devices & software
01 · What it watches
Changes, not uptime.
A monitoring tool tells you a server is up. Pulse tells you what changed on it, and who did it.
FirewallRule additions, edits, removals, and config drift on FortiGate, WatchGuard and SonicWall.
AdminsGlobal, privileged and local administrator changes in Active Directory and Microsoft 365.
MFAConditional Access, authentication methods, and per-user MFA state.
PatchesPatch status across servers and workstations, with the window it missed.
BackupsJob status and restore evidence, so the committee sees more than a green light.
Devices & softwareNew machines and new installs, matched against what was approved.
02 · How it records
Who. What. When.
Every change is a row with a name, a timestamp, and an approval. Review it, approve it with a reason, or mark it not approved so it lands on the fix list.
FirewallRule added · any → 3389T. Reyes · Tue 09:14No ticket
AdminsGlobal Administrator grantedMSP · Tue 11:02#4172 approved
MFAConditional Access policy disabledJ. Miller · Wed 08:41No ticket
BackupsNightly job schedule changedSVC · Wed 22:10#4180 approved
Pulse tracks and reports. It does not make, block or automate changes, and it does not replace your MSP, firewall or RMM.
03 · How it reports
One page. Monthly.
Drift, findings and approvals roll up into a one-page executive IT oversight report for the IT/Audit Committee. Our security and compliance team reviews it with you before the meeting.
Start free.IT Oversight — MonthlySeptember
38changes
3need approval
6findings closed
Reviewed