Security Second Opinion
Check the security claims of your IT or security provider against your own evidence.
Your MSP or security vendor tells you "all data is encrypted" or "MFA is enforced everywhere". Security Second Opinion checks each claim against what Verisight has actually observed in your environment. Available on Managed and above, with one review included per year.
1. Create a review
Open Second Opinions → New second opinion and enter:
- a title and the provider whose claims you're checking;
- the claims, either as a CSV file with a claim column or one claim per line, pasted in.
2. Read the verdicts
Each claim is matched to the security controls it relates to, then compared with your findings on those controls:
| Verdict | Meaning |
|---|---|
| Contradicted | An open finding shows the gap is still there. |
| Corroborated | Findings existed on that control and have since been closed. |
| Unevidenced | Nothing Verisight has observed touches this claim. Silence is not agreement. |
Verdicts are produced by fixed rules, with no AI model, and cannot be edited by hand. Reviewers add a note next to the verdict instead, so the machine's reading and the human judgement stay separate.
3. Add evidence and get Sentinel's review
Attach supporting files to the review (reports, screenshots, contracts) under Evidence files. They are visible to the Sentinel analyst who reviews it, and their note appears as Sentinel's review note.
4. Re-analyse and complete
- Re-analyse re-checks every claim against your latest evidence, for example after a new assessment. Reviewer notes are kept.
- You can only mark the review completed once every contradicted claim has a reviewer note. A contradiction is the point of the review, so it can't be signed off without a position on it.