Observed arrival · 2026-11-06
Gapsio checks what Defender actually enforces
Gapsio presents a read-only security auditing tool for comparing Microsoft Defender policies with the effective state of devices and AI agents.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Microsoft Defender administrators managing mixed-OS fleets
- Worth noticing
- It compares desired policy, Intune configuration, and effective device state, including local changes and exclusions from multiple sources.
Field notes
The homepage lays out a three-way comparison between a target baseline, Intune configuration, and Defender's reported effective state. Its examples include an ASR rule in Audit mode on 212 devices and local exclusions merged on 312 devices; these are presented as examples, not independently verified tenant results. The page also says snapshots can preserve local-exclusion history beyond Defender's stated 30-day window.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
⊠LoginAccess appeared gated
✦PrettyNotable craft visible
◎NicheUnusually specific use
One card from the complete issue