Struggling to deal with fast-changing attacks? Learn why September 15th.

Save your seat →

Adversary-in-the-Middle

Detect and block AiTM proxies stealing session tokens.

ClickFix (+Fix variants)

Block attacks that trick users into running malicious code.

Malicious OAuth integrations

Detect suspicious OAuth consent flows and stop persistent access.

Malicious browser extensions

Shine a light on risky browser extensions.

Malicious file downloads

Gain visibility into browser downloads and block malicious files.

Ghost logins

Surface hidden login paths that bypass SSO and expose accounts.

Mobile phishing (QR & SMS)

Detect phishing links delivered via SMS and QR codes.

Credential stuffing

Identify reused and compromised credentials across SaaS logins.

Session hijacking

Detect and block stolen session tokens before attackers get access.

Zero-day phishing

Detect phishing TTPs directly in the browser and stop credential theft.

Stop account takeover

Stop ATO with stolen credential and compromised token detection.

Harden unmanaged identities

Harden access paths with visibility, detection, and guardrails.

Investigate browser-related incidents

Investigate and respond faster with unique browser telemetry.

Secure shadow SaaS

See and control shadow SaaS in the browser.

Secure AI

See and control AI apps in the browser.

Secure BYOD

Extend consistent browser-based protection to unmanaged devices.

Secure Chromebooks

Secure browser activity on Chromebooks without endpoint agents.

Investigate and stop data loss

Detect and prevent data loss across AI tools, apps, and sessions.

Remote browser isolation

Detect attacks that look like normal browsing.

Secure web gateways

Detect attacks inside the browser after SWGs allowed the connection.

Cloud access security broker

Catch browser-based identity threats in real time, not after the fact.

Security awareness training

Block real phishing instead of training users on simulations.

Push Help Center

Ready to help

Help for administratorsHelp for admins Help for employeesHelp for employees

Help for administrators

Integrating Push with your identity provider

What Azure AD license is required to query Microsoft 365 MFA details?

If you add a Microsoft 365 API integration that does not have the required license for Push to query MFA adoption details, you will get an integration error and may be prompted to reintegrate.

Microsoft's MFA report comes from the "Advanced security and usage reports” feature that's included with an Entra ID P1 license.

Push's integration also relies on data provided by Microsoft's audit log to provide details on when an employee last logged in to their M365 account, and when an OAuth integration was last used. These features also require a P1 license.