Hello ConnectSecure Team,

First, thank you for the continued development of the ConnectSecure platform. We have been evaluating and implementing both the Vulnerability Management and Compliance capabilities and see a significant opportunity to make the Compliance platform more powerful and differentiated for MSPs.

Overview

We would like to request expanded integration capabilities focused on automated compliance evidence collection, allowing ConnectSecure to gather, validate, and maintain compliance evidence directly from integrated platforms.

Today, many MSPs already manage their customer's infrastructure through systems such as Microsoft 365, Datto RMM, and other Kaseya products. Much of the technical evidence required for compliance frameworks already exists within these platforms but must be manually gathered and uploaded into compliance assessments.

Our request is for ConnectSecure to become the centralized compliance evidence platform by automatically collecting and maintaining evidence from integrated systems.

Primary Platforms Requested

Microsoft 365 / Microsoft Entra ID (Highest Priority)

For many organizations, Microsoft 365 contains some of the most valuable compliance evidence available.

We would like ConnectSecure to collect evidence either:

On demand via a "Refresh Evidence Now" function

Through scheduled automated collection

Through continuous synchronization where possible

Example evidence sources:

Identity & Access Management

MFA enabled status

Conditional Access policies

Legacy authentication disabled

Administrative account inventory

Privileged role assignments

Guest account management

Password policies

Endpoint Security

Microsoft Defender status

Defender for Endpoint status

Device compliance

Encryption status

Secure Score metrics

Microsoft 365 Security

Secure Score

Secure configuration recommendations

Tenant security settings

Email protection policies

Anti-phishing policies

Safe Links configuration

Safe Attachments configuration

Compliance Framework Mapping

Automatically map collected evidence to controls for:

CIS Controls

NIST CSF

NIST 800-171

CMMC

HIPAA

SOC 2

Cyber Insurance Requirements

Datto RMM (Highest Priority)

The current Datto integration is valuable for deployment and asset management; however, we would like to see the integration expanded to function as a compliance evidence source.

Examples of evidence that could be collected include:

Asset Management

Asset inventory

Device ownership

Device location

Device age

Last check-in status

Warranty information

Patch Management

Missing critical updates

Missing security updates

Patch compliance status

Patch deployment failures

Update history

Endpoint Protection

Antivirus installed

Antivirus active

EDR status

Anti-ransomware status

Security agent status

Operating System Compliance

OS versions

End-of-life operating systems

Unsupported operating systems

Secure configuration validation

Security Controls

Firewall enabled

Disk encryption status

Secure Boot status

Remote access tools

Monitoring status

Additional Kaseya Platform Integrations Requested

Many MSPs utilizing Datto RMM are also leveraging other Kaseya platforms. We would like to see ConnectSecure expand compliance data collection across the Kaseya ecosystem.

Datto BCDR

Evidence examples:

Backup success/failure status

Recovery points

Protected systems

Backup retention

Backup health

Disaster recovery readiness

Datto SaaS Protection

Evidence examples:

Microsoft 365 backup status

Protected users

Protected SharePoint sites

Protected Teams data

Backup retention status

IT Glue

Evidence examples:

Policy documentation

Asset ownership

Security documentation

Business continuity plans

Incident response plans

Risk acceptance documentation

RocketCyber

Evidence examples:

Security event monitoring

Incident records

Threat detection status

Response activity

Kaseya VSA

Evidence examples:

Patch compliance

Device inventory

Endpoint configuration status

Management coverage

Kaseya 365

Evidence examples:

Security posture data

Protection status

Endpoint compliance

Security configuration validation

Suggested Compliance Workflow

Automated Collection

ConnectSecure would automatically collect evidence at scheduled intervals.

Examples:

Daily

Weekly

Monthly

On-Demand Collection

Allow assessors to:

Refresh Evidence Now

against:

Individual controls

Entire compliance frameworks

Individual assets

Entire companies

Continuous Evidence Validation

When source systems change:

Re-evaluate controls automatically

Update compliance status

Preserve historical evidence

Historical Audit Trail

Maintain evidence history including:

Collection timestamp

Source platform

Evidence snapshot

Previous control state

Current control state

This would significantly improve audit readiness and regulatory reporting.

Benefits to MSPs

This functionality would allow MSPs to:

Reduce manual evidence collection

Improve assessment accuracy

Increase compliance automation

Provide continuous compliance monitoring

Reduce audit preparation effort

Demonstrate ongoing compliance rather than point-in-time compliance

Deliver greater value through the Compliance module

Benefits to ConnectSecure

This enhancement would position ConnectSecure as more than a vulnerability management platform. It would become a centralized security and compliance evidence platform capable of automatically validating controls across multiple systems and frameworks.

For MSPs managing dozens or hundreds of customers, automated evidence collection from Microsoft 365, Datto RMM, and other Kaseya products would dramatically increase adoption and value of the Compliance module.

Thank you for your consideration.

Jason Johnson