Skip to content

Version 3.4 – The New Griffin31

Griffin31 version 3.4 brings a new interface, new pages for threats, policies and cases, and the biggest addition yet: Evidence for every recommendation, so you always see exactly what each result is based on.


Simpler navigation, cleaner pages, and information ordered by what to fix first. Take the tour.

A new page showing real-world attacks on Microsoft 365, such as account takeover, credential theft and phishing. For each threat you see what the attacker does, every stage of the attack, and which of your recommendations block each stage. Learn more

All alert settings in one place: emails when a recommendation regresses, and tracking of Governance changes in Microsoft Entra, each with its own recipients. Learn more

Your personal queue of recommendations assigned to you to fix or review. This is the first step toward a full case and ticketing system, with more features on the way. Learn more

Clear states that show who decided what:

  • Passed Partial Failed: checked automatically by Griffin31
  • Not reviewed: needs a person to check it
  • Reviewed: a person on your team checked and confirmed it
  • Exempted: left out on purpose, with a documented reason

Every decision is saved with its reason, who made it and when. Learn more

6. Evidence: The Proof Behind Every Result

Section titled “6. Evidence: The Proof Behind Every Result”

Every recommendation now shows the data its result is based on: which users, policies, devices or settings meet the requirement, and which don’t.

  • No more “Failed” without an explanation. See exactly what to fix and where.
  • After a fix, see the change on the next scan.
  • Proof ready to show auditors, management or customers.

Learn more

Stories are updated and grouped by security goal, with your progress on each. Compliance shows each framework’s controls with the recommendations, and their Evidence, behind them. It’s a first step toward audit preparation inside Griffin31.


We updated our checks to follow the latest Microsoft and CIS security guidance, and added new recommendations that cover newer risks.

As a result, your overall score may change. The change reflects a higher standard, not necessarily a change in your tenant. The goal is simple: to show you the full picture, including gaps that weren’t measured before. Every gap now comes with Evidence that shows exactly what to do. Read more


  • Accept as is: lock the current state of a partial or failed recommendation you’re comfortable with, and get alerted if it gets worse
  • Evidence change alerts: know when a user, policy or setting behind a result changes
  • More Governance rules: detection of more sensitive changes in your tenant
  • SIEM integration: pull Griffin31 data into your own systems through an API
  • AI agent analytics: visibility into the AI agents in your environment
  • And more

Questions? Contact us at support@griffin31.ai.