In short: Netwrix 1Secure is a SaaS platform that combines data security posture management (DSPM), Active Directory and Entra ID risk assessment, activity auditing and alerting. It covers Microsoft 365, Active Directory, Windows file servers and SQL Server, comes in Data, Identity and Complete editions, and is licensed per identity (user).
What Netwrix 1Secure is
Netwrix 1Secure is Netwrix's cloud platform for data and identity security in Microsoft-centric organisations. It is hosted in Microsoft Azure and run by Netwrix, so there is no audit server or database for you to look after.
It brings together four jobs that used to need separate tools:
- Data security posture management (DSPM): discovers and classifies sensitive data, then shows where it is overexposed through broad permissions, open access or sharing.
- Identity risk assessment: checks Active Directory and Entra ID for problems such as excessive privileges, stale accounts and risky admin access, using checks drawn from Netwrix PingCastle.
- Activity auditing: a searchable record of who accessed data, what changed and when, with state-in-time reports for audits.
- Alerting and investigation: alerts on critical activity, with AI-assisted remediation guidance and Netwrix Neo, the AI assistant built into 1Secure.
1Secure also helps with Microsoft 365 Copilot readiness: it finds sensitive data and excessive permissions before Copilot can surface them, and monitors Copilot-related access.
1Secure editions compared
Netwrix sells 1Secure in three editions. They share the same console and the same supported sources; what differs is which risks are in scope.
| Edition | Focus | Typical use |
|---|---|---|
| Data | Data security: sensitive data discovery and classification, permissions, activity monitoring and alerting | Data protection, UK GDPR evidence, Copilot readiness |
| Identity | Identity security: PingCastle-based Active Directory and Entra ID risk insights, activity monitoring and alerting | Hardening Active Directory, privileged account reviews |
| Complete | Data and identity insights together | Organisations wanting one view of both |
Netwrix also refers to 1Secure DSPM (data security across Microsoft 365, file servers and permissions analysis) and 1Secure ITDR (identity threat detection and response: identity risk assessment, activity monitoring and recovery). We will match the edition to the problem you are trying to solve.
Supported sources are Active Directory, Microsoft Entra ID, Exchange Online, SharePoint Online, Windows Server, Windows file servers and SQL Server.
How 1Secure is licensed
1Secure is licensed per identity (user). Netwrix counts each uniquely identifiable identity once, and you need enough licences for the highest number of identities managed during the term. Service accounts can be kept out of the billable count by placing them in an Active Directory OU or Entra ID group and excluding it in the source settings, so you are not paying for accounts no person logs in to.
What changes the quote:
| Factor | Why it matters |
|---|---|
| Edition | Data, Identity or Complete, or the DSPM and ITDR packages |
| Identity count | Licences are per identity, and options are priced in bands by user count |
| Term | We confirm the commitment and billing term available when we quote |
Netwrix offers a self-service checkout for small organisations, with community support only. Buying through us adds a UK team for setup, tuning and reviewing what 1Secure finds. Ask us for a quote.
Requirements and deployment
Cloud sources (Entra ID, Exchange Online and SharePoint Online) connect through an app registration in your Microsoft Entra tenant, so nothing is installed for them.
On-premises sources such as Active Directory, file servers and SQL Server need the Netwrix Cloud Agent on a Windows machine. Netwrix strongly recommends a Windows Server host, and Windows Server 2012 R2 and later versions are listed. The agent needs .NET Framework 4.8 or later, Windows PowerShell 3.0 or later and outbound TCP port 443, and you generally need only one agent for each audited on-premises domain. Its hardware sizing depends on how much activity you audit.
Organisations that cannot send audit data to the cloud can ask Netwrix about on-premises processing options.
Who 1Secure suits
1Secure is aimed at lean IT teams who need enterprise-style visibility without running enterprise-style infrastructure. It works well for:
- small and mid-sized businesses moving from file servers to SharePoint and OneDrive
- organisations planning Microsoft 365 Copilot and worried about oversharing
- anyone who needs audit evidence for UK GDPR, PCI DSS or a cyber insurance questionnaire
- teams that have never had a proper review of their Active Directory
If you need to audit systems 1Secure does not cover, such as VMware, network devices or Oracle Database, Netwrix Auditor may be the better fit.
How we help
We set up the 1Secure tenant in your name, connect your Microsoft 365 tenant, install the Cloud Agent where needed and tune alert profiles so the right people get the right alerts. After the first assessment we walk through the findings with you, agree a fix list and, if you want, carry out the remediation. Licence changes and renewals sit on your normal Forever Systems invoice. Ask us for a quote, or browse other identity and access tools.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What does Netwrix 1Secure DSPM do?
It discovers and classifies sensitive data in Microsoft 365, file servers and SQL Server, shows who can access it and where it is overshared, monitors activity around it and alerts on unauthorised access. It also helps prepare data for Microsoft 365 Copilot.
Does 1Secure need a server on site?
Only if you want to cover on-premises sources. Microsoft 365 and Entra ID connect directly from the cloud. Active Directory, file servers and SQL Server need the Netwrix Cloud Agent on a Windows server, which only needs outbound HTTPS.
How are users counted for 1Secure licensing?
1Secure is licensed per identity, counted once per unique identity, and you need enough licences for the highest number managed during the term. Service accounts can be excluded from the billable count by placing them in an excluded OU or Entra ID group. We check your directory before quoting so the licence matches the real number of users.
Is 1Secure the cloud version of Netwrix Auditor?
Not exactly, but it is where Netwrix sends people who want a cloud deployment. 1Secure adds data security posture management and identity risk scoring, but supports fewer on-premises system types than Auditor, which also covers VMware, NAS storage, Oracle and network devices.
Can we try 1Secure before buying?
Yes. Netwrix offers a free 14-day trial of 1Secure with full access. Ask us and we can help you set up the trial against your own environment and review the results with you.