Home / FAQ
SCOUTz questions, answered.
Last reviewed August 2026
What is SCOUTz? SCOUTz is an agentless security assessment and sales-intelligence platform for MSPs. It helps teams review external domain signals and customer-approved Microsoft 365 data, then turn relevant findings into a prioritized, plain-English, client-ready security story.
Does SCOUTz install an agent or make changes? No. SCOUTz installs no endpoint agent, hardware appliance, or network probe. The Microsoft 365 assessment is read-only, and SCOUTz does not make configuration changes or automate remediation.
What can a domain-only assessment see? It can use public signals such as DNS, WHOIS, HTTPS, email-security and related external information. It cannot see internal systems, endpoint controls, private network configuration, or operational processes.
How does SCOUTz detect Shadow AI? SCOUTz uses customer-approved Microsoft 365 access to surface relevant app-consent context. It does not claim to see every tool a person may use outside that authorized Microsoft 365 scope.
Can MSPs use their own branding, and where do operators sign in? SCOUTz supports branded client-ready reporting. MSP operators sign in at app.scoutzsecurity.io/msp/login; clients sign in at app.scoutzsecurity.io/client/login.
Frequently asked questions
What is SCOUTz?
SCOUTz is an agentless security assessment and sales-intelligence platform built for MSPs. It reviews selected external domain signals and customer-approved Microsoft 365 data, then organizes relevant findings into clear priorities, plain-English impact, client-ready reporting, and practical remediation conversations.
Who is SCOUTz built for?
SCOUTz is built for MSP owners, sales leaders, vCIOs, security consultants, and technicians who need a faster, more credible way to uncover relevant risk, explain the business context, and move an assessment into the next client conversation.
Does SCOUTz install an agent?
No. SCOUTz installs no endpoint agent, hardware appliance, or network probe. The platform is designed to support assessment workflows using public external signals and customer-approved Microsoft 365 access, without adding software to endpoints or making configuration changes.
Is the Microsoft 365 assessment read-only?
Yes. The Microsoft 365 assessment uses customer-approved OAuth and Microsoft Graph in a read-only assessment context. SCOUTz does not make security changes, configure tenant settings, or automate remediation. Customer authorization defines the scope of what the assessment can access.
What can a domain-only assessment see?
A domain-only assessment can review public DNS, WHOIS, HTTPS, email-security, and related external signals. It cannot observe private networks, endpoints, internal configuration, user behavior, managed detection activity, or operational controls that are not exposed through those public signals.
What can SCOUTz see in Microsoft 365?
Within the customer-approved Microsoft 365 scope, SCOUTz can surface relevant posture, licensing visibility, and app-consent context through Microsoft Graph. It cannot see controls or data outside the authorized scope, nor does it replace broader operational monitoring or security validation.
Does SCOUTz make security changes automatically?
No. SCOUTz is an assessment and sales-intelligence platform, not an automated remediation tool. It helps MSP teams identify, prioritize, explain, and discuss next steps. Any configuration changes or remediation remain decisions and actions for the MSP and client.
What is the 3AM Test?
The 3AM Test is a plain-English operational readiness conversation built around six direct questions: monitoring, recovery, escalation, review cadence, security basics, and active-threat awareness. It helps an MSP make the business impact of incomplete answers visible without overstating what an assessment can observe.
How does SCOUTz detect Shadow AI?
SCOUTz uses customer-approved Microsoft 365 app-consent context to bring relevant third-party application activity into the security story. That can support a conversation about unsanctioned or poorly understood AI-related tools, but it does not claim to observe every application used outside the authorized Microsoft 365 scope.
Can MSPs use their own branding?
Yes. SCOUTz supports branded client-ready reporting so MSP teams can present the assessment in a way that fits their own advisory and service-delivery relationship. The intent is to make findings easier for clients to understand while keeping the MSP central to the next conversation.
How do clients access their reports?
Client access is available through the client portal at app.scoutzsecurity.io/client/login. The exact report-sharing workflow should be agreed by the MSP and client as part of their service relationship, including who receives access and how findings are discussed.
Where do MSP operators sign in?
MSP operators sign in at app.scoutzsecurity.io/msp/login. This portal is intended for the MSP workflow. Client users should use the separate client portal at app.scoutzsecurity.io/client/login so each audience enters the appropriate experience.