View policies
Select Policies from the left navigation menu to view all system-defined policies and their current status across your account. Summary cards at the top of the page show:
Total Policies: The total number of system-defined policies.
Policies Enabled: The number of policies currently active.
Not Compliant: The number of policies with at least 1 domain in violation.
High Risk: The number of policies with at least 1 high-risk finding.
The policies table includes the following columns:
Column name | Description |
|---|---|
Policy | The policy name. Select to open the Policy Details panel. See Policy guidance for cross-policy scope and pairing guidance. |
Principles | The principle the policy belongs to. |
Source | How the policy evaluates the domain. A blue locked icon indicates a DNS provider integration is required. A grey open icon indicates an external scan. |
Failed domains | The number of domains currently failing this policy. |
Enabled | Whether the policy is active for this account (Enabled or Not enabled). |
Policy details
Select a policy name to open the Policy Details panel. The panel provides context to help you understand the policy’s purpose, its security relevance, and how to apply it effectively. The panel displays the following:
Policy name and status: The policy name and its current enabled state.
Description: A summary of what the policy checks.
Principle: The principle the policy belongs to.
Requirements: The DNS provider integration required to run this policy. NONE indicates the policy runs as an external scan. DNS_PROVIDER_ENHANCED indicates a connected DNS provider integration is required for the policy to evaluate the domain correctly.
Posture impact: The maximum negative impact on the posture score if the policy is violated.
Why it matters: A plain-language explanation of the security risk the policy addresses.
Policy guidance: Guidance on when and how to apply the policy effectively.