Hello ConnectSecure Team, First, thank you for the continued development of the ConnectSecure platform. We have been evaluating and implementing both the Vulnerability Management and Compliance capabilities and see a significant opportunity to make the Compliance platform more powerful and differentiated for MSPs. Overview We would like to request expanded integration capabilities focused on automated compliance evidence collection, allowing ConnectSecure to gather, validate, and maintain compliance evidence directly from integrated platforms. Today, many MSPs already manage their customer's infrastructure through systems such as Microsoft 365, Datto RMM, and other Kaseya products. Much of the technical evidence required for compliance frameworks already exists within these platforms but must be manually gathered and uploaded into compliance assessments. Our request is for ConnectSecure to become the centralized compliance evidence platform by automatically collecting and maintaining evidence from integrated systems. Primary Platforms Requested Microsoft 365 / Microsoft Entra ID (Highest Priority) For many organizations, Microsoft 365 contains some of the most valuable compliance evidence available. We would like ConnectSecure to collect evidence either: On demand via a "Refresh Evidence Now" function Through scheduled automated collection Through continuous synchronization where possible Example evidence sources: Identity & Access Management MFA enabled status Conditional Access policies Legacy authentication disabled Administrative account inventory Privileged role assignments Guest account management Password policies Endpoint Security Microsoft Defender status Defender for Endpoint status Device compliance Encryption status Secure Score metrics Microsoft 365 Security Secure Score Secure configuration recommendations Tenant security settings Email protection policies Anti-phishing policies Safe Links configuration Safe Attachments configuration Compliance Framework Mapping Automatically map collected evidence to controls for: CIS Controls NIST CSF NIST 800-171 CMMC HIPAA SOC 2 Cyber Insurance Requirements Datto RMM (Highest Priority) The current Datto integration is valuable for deployment and asset management; however, we would like to see the integration expanded to function as a compliance evidence source. Examples of evidence that could be collected include: Asset Management Asset inventory Device ownership Device location Device age Last check-in status Warranty information Patch Management Missing critical updates Missing security updates Patch compliance status Patch deployment failures Update history Endpoint Protection Antivirus installed Antivirus active EDR status Anti-ransomware status Security agent status Operating System Compliance OS versions End-of-life operating systems Unsupported operating systems Secure configuration validation Security Controls Firewall enabled Disk encryption status Secure Boot status Remote access tools Monitoring status Additional Kaseya Platform Integrations Requested Many MSPs utilizing Datto RMM are also leveraging other Kaseya platforms. We would like to see ConnectSecure expand compliance data collection across the Kaseya ecosystem. Datto BCDR Evidence examples: Backup success/failure status Recovery points Protected systems Backup retention Backup health Disaster recovery readiness Datto SaaS Protection Evidence examples: Microsoft 365 backup status Protected users Protected SharePoint sites Protected Teams data Backup retention status IT Glue Evidence examples: Policy documentation Asset ownership Security documentation Business continuity plans Incident response plans Risk acceptance documentation RocketCyber Evidence examples: Security event monitoring Incident records Threat detection status Response activity Kaseya VSA Evidence examples: Patch compliance Device inventory Endpoint configuration status Management coverage Kaseya 365 Evidence examples: Security posture data Protection status Endpoint compliance Security configuration validation Suggested Compliance Workflow Automated Collection ConnectSecure would automatically collect evidence at scheduled intervals. Examples: Daily Weekly Monthly On-Demand Collection Allow assessors to: Refresh Evidence Now against: Individual controls Entire compliance frameworks Individual assets Entire companies Continuous Evidence Validation When source systems change: Re-evaluate controls automatically Update compliance status Preserve historical evidence Historical Audit Trail Maintain evidence history including: Collection timestamp Source platform Evidence snapshot Previous control state Current control state This would significantly improve audit readiness and regulatory reporting. Benefits to MSPs This functionality would allow MSPs to: Reduce manual evidence collection Improve assessment accuracy Increase compliance automation Provide continuous compliance monitoring Reduce audit preparation effort Demonstrate ongoing compliance rather than point-in-time compliance Deliver greater value through the Compliance module Benefits to ConnectSecure This enhancement would position ConnectSecure as more than a vulnerability management platform. It would become a centralized security and compliance evidence platform capable of automatically validating controls across multiple systems and frameworks. For MSPs managing dozens or hundreds of customers, automated evidence collection from Microsoft 365, Datto RMM, and other Kaseya products would dramatically increase adoption and value of the Compliance module. Thank you for your consideration. Jason Johnson
