Lepide alternative for Microsoft 365
Lepide logs every change. Who shows what an agent can reach in your tenant?
Lepide Data Security Platform audits Active Directory, file servers and Microsoft 365 from one Windows console, classifies content and ships compliance report packs. 1Security looks at the Microsoft 365 tenant as a security surface: what every AI agent and app can reach, where and from which device each sign-in and file touch came, what breaks a user’s own pattern, and the fix staged next to each finding. It reads your tenant with a read-only consent, so it runs next to Lepide without touching a single setting.
- Verified 25 Oct 2026
- Keep both or switch
- Free side-by-side POC
- Every claim sourced below
Fair first
What Lepide does well.
Written so a Lepide customer nods. These are real strengths, most of them outside Microsoft 365, and a team that relies on them keeps them while 1Security takes the tenant.
One console for the hybrid estate
Active Directory and Group Policy, Windows file servers, NetApp, Dell EMC, Nutanix and Nasuni storage, SharePoint and Exchange Server, SQL Server, next to Exchange Online, SharePoint Online, OneDrive, Teams and Entra ID. Object rollback and restore for on-premises Active Directory.
Content classification
Lepide Identify scans files and mail with hundreds of predefined rules, more than 85 file types with an OCR option, proximity scanning against false positives, risk and monetary value per pattern, and an on-the-fly mode that classifies a file as it is created or changed.
Compliance report packs and a long archive
Pre-built audit reports mapped to GDPR, HIPAA, SOX, PCI DSS, CCPA, GLBA, FISMA, CMMC, CJIS and ISO, scheduled to the auditor’s inbox, and an audit trail kept in your own SQL Server for as long as you decide, with archive and restore.
Threat models and file-server response
Pre-defined threat models with threshold alerts, a PowerShell script fired by any alert, a mobile app for out-of-hours response, and Lepide Protect policies that strip excess permissions on Windows file servers with a backup before every run.
What it does not touch
Four questions an audit platform was never built to answer.
Each one surfaces during an incident, an audit or a Copilot rollout. Lepide records the change; these questions are about what the change means across the tenant, and none of them is on its feature list.
- 01
What an agent can reach, not only what Copilot searched
Lepide reports on Microsoft 365 Copilot: who has a licence, what they searched, which sensitive files Copilot touched, with a keyword alert for risky prompts, and only for users who hold the Copilot licence. 1Security maps every agent and AI app in the tenant, Copilot Studio agents, Entra Agent ID identities and third-party apps included: what each can read across files, sites, users and mail, who deployed it, what it did, and when it broke its own pattern.
- 02
Locations and devices, not an IP column
Lepide shows the IP address on a sign-in and lets you filter out trusted locations. 1Security resolves every sign-in and file touch to a country, a city and a network class, VPN, Tor or datacenter, draws the map and the travel path per user, lists every device that touched data with the unmanaged ones flagged, and tells you whether Conditional Access actually covered them.
- 03
A permission graph with the fix next to it
Lepide Trust lists current permissions for SharePoint Online, OneDrive and Exchange Online; its automated revocation, Lepide Protect, works for Windows file servers only. 1Security resolves direct grants, sharing links, groups, site roles, inheritance, apps, agents and guests into one answer per file, and stages more than 40 Microsoft 365 actions behind a review queue with a grace period, a revert and a read-back from Microsoft.
- 04
Anomalies on users, apps and agents from day one
Lepide’s anomaly analysis learns each user for 90 to 180 days, and its documented examples are file servers and Active Directory. 1Security scores users, apps and agents against their own history from the first scan, with a threshold you set and re-apply to three years of events, and ties each anomaly to the sensitivity of what was touched.
Side by side
1Security vs Lepide, row by row.
Three states, not two: where Lepide has a lighter version of something, the row says so, and where Lepide is simply better, the row says that too. Every Lepide cell carries a number that resolves to a public source below the table.
- 15Covered
- 0Partial or lighter
- 1Not covered
- 5Covered
- 11Partial or lighter
- 0Not covered
| Capability | 1Security | Lepide |
|---|---|---|
| Gaps and incidents | ||
| Activity history | 1SecurityCovered 3 years as standard, each event carrying the user, file, device, location, app and the sensitivity of what was touched | LepideCovered Kept in your own SQL Server for as long as you keep it, with archive and restore; SharePoint Online collected every 5 minutes15 |
| Sign-in logs | 1SecurityCovered Per-user sign-ins with network class, device and Conditional Access coverage | LepideCovered Successful and failed Entra ID sign-ins, filtered by user, date, operation, IP address and criticality6 |
| Anomaly detection | 1SecurityCovered Learns what is normal per user, app and agent from the first scan; threshold you set and re-apply to history | LepidePartial or lighter Per-user learning of 90 to 180 days; documented examples are file servers and Active Directory, OneDrive claimed on the product page8 |
| Locations and networks | 1SecurityCovered Country, city, VPN, Tor and datacenter classification, map, per-user travel | LepidePartial or lighter IP address on events and a trusted-location filter on sign-in reports; no network classification or map documented7 |
| Devices | 1SecurityCovered Every device touching data, unmanaged ones flagged, disable action | LepidePartial or lighter Entra ID device state report; which devices touch data is not documented5 |
| Sensitive data detection | 1SecurityCovered Own engine with 300+ detectors and OCR, nothing to install, on any licence; Purview detections as a second opinion | LepideCovered Own engine with hundreds of rules, 85+ file types, OCR option, on SharePoint Online, OneDrive and Exchange Online; runs on agent and SQL servers you provide10 |
| Email and mailboxes | 1SecurityCovered Outbound sensitive content, delegated sending, shared mailboxes, actions on messages | LepidePartial or lighter Mailbox and role changes, non-owner access, classification of mail content; mail flow and send-as analysis not documented4 |
| Administration, compliance, AI | ||
| Permission graph | 1SecurityCovered Direct grants, links, groups, site roles, inheritance, apps, agents and guests resolved into one answer per file | LepidePartial or lighter Current permissions for SharePoint Online, OneDrive and Exchange Online; Entra ID and Teams not in the matrix, sharing links, apps and agents not documented12 |
| Remediation in Microsoft 365 | 1SecurityCovered 40+ actions across users, sites, files, apps, licences, devices, agents and email; review queue, grace period, revert, read-back confirmation | LepidePartial or lighter Lepide Protect policies revoke permissions on Windows file servers only; in Microsoft 365, a PowerShell script fired by an alert13 |
| Compliance mapping | 1SecurityCovered 11 frameworks on shared requirements, weekly snapshots, dated evidence packs | LepideCovered Pre-built audit reports mapped to GDPR, HIPAA, SOX, PCI DSS, CCPA, GLBA, FISMA, CMMC, CJIS and ISO19 |
| AI agents and Copilot | 1SecurityCovered Every agent and AI app: reach across files, sites and mail, owner, activity, anomalies, quarantine; Copilot readiness with a fix list and per-site indexing block | LepidePartial or lighter Microsoft 365 Copilot only: licence holders, searches, sensitive data accessed, keyword alert; Copilot Studio and other agents not documented17 |
| On-premises file servers and Active Directory | 1SecurityNot covered Microsoft 365 only | LepideCovered Windows file servers, NetApp, Dell EMC, Nutanix, Nasuni, SharePoint and Exchange Server, SQL Server, Active Directory and Group Policy26 |
| Fit and deployment | ||
| Public API | 1SecurityCovered REST for logs, detections, alerts, users, compliance, readiness; MCP server with the same reads | LepidePartial or lighter Not documented; Lepide AI answers plain-language questions inside the web console23 |
| SIEM feed | 1SecurityCovered Enriched events pulled by Sentinel, Splunk or any SOC over the API | LepidePartial or lighter Triggered alerts pushed to Splunk, QRadar, LogRhythm, ArcSight and others, CEF supported; not the audit stream14 |
| Deployment and residency | 1SecurityCovered SaaS, your own Azure (BYOC) or on-premise at any size; a dedicated database per tenant | LepidePartial or lighter Windows Server plus SQL Server you run, on-premises or in your own cloud VMs; a reseller-listed SaaS covers SharePoint Online permissions16 |
| Microsoft licence needed | 1SecurityCovered Nearly everything on Business Basic, E1 or E3; no E5 or Purview for content scanning | LepidePartial or lighter Required Microsoft plans not stated; Copilot reports need a Copilot licence on each audited user18 |
- Covered
- Partial or lighter
- Not covered
Sources for every Lepide claim
Verified 2026-10-25- 1.Lepide Data Security Platform overview (modules, single Windows application with SQL, deployment) - www.lepide.com/data-security-platform
- 2.Lepide release history (26.1 Lepide AI and Copilot, 25.1 Lepide Protect, 24.4 Copilot security) - www.lepide.com/lepideauditor/release-history.html
- 3.Lepide Microsoft 365 reporting (audited workloads) - www.lepide.com/lepideauditor/microsoft-office-365-reporting.html
- 4.Lepide Office 365 auditing (Teams, OneDrive, Exchange Online, non-owner mailbox access) - www.lepide.com/lepideauditor/office-365-auditing.html
- 5.Lepide Entra ID auditing (sign-ins, state reports incl. devices) - lepide.com/lepideauditor/entra-id-auditing.html
- 6.Lepide how-to: investigate risky sign-ins in Entra ID (report filters) - www.lepide.com/how-to/investigate-risky-sign-ins-in-microsoft-entra-id.html
- 7.Lepide how-to: check login activity in Microsoft 365 (trusted locations, retention) - www.lepide.com/how-to/check-login-activity-history-in-microsoft-office-365.html
- 8.Lepide knowledge base: configuring anomaly analysis - www.lepide.com/knowledgebase/?page_id=3971907604&slug=configuring-anomaly-analysis
- 9.Lepide knowledge base: configuring threat models and real-time alerts (alert actions) - www.lepide.com/knowledgebase/?page_id=3972464652&slug=configuring-threat-models-and-real-time-alerts
- 10.Lepide data classification datasheet (file types, OCR, rules) - www.lepide.com/datasheet/data-classification.pdf
- 11.Lepide data discovery and classification configuration guide (Microsoft 365 profiles, OCR option) - www.lepide.com/configurationguide/data-discovery-and-classification.pdf
- 12.Lepide knowledge base: permissions analysis compatibility matrix - www.lepide.com/knowledgebase/?page_id=4010409986&slug=compatibility-matrix-permissions-analysis
- 13.Lepide knowledge base: Lepide Protect (file servers only, backups) - www.lepide.com/knowledgebase/?page_id=3976658951&slug=lepide-protect
- 14.Lepide knowledge base: SIEM integration (alert feeds, CEF) - www.lepide.com/knowledgebase/?page_id=4084793359&slug=siem-integration
- 15.Lepide knowledge base: archiving and data retention - www.lepide.com/knowledgebase/?page_id=4060479491&slug=archiving-and-data-retention
- 16.Lepide knowledge base: system requirements (Windows Server, SQL Server, hardware) - www.lepide.com/knowledgebase/?page_id=3805773826&slug=system-requirements-lepide-data-security-platform
- 17.Lepide knowledge base: how to secure Copilot using Lepide (reports, dashboard, alert) - www.lepide.com/knowledgebase/?page_id=4065460226&slug=how-to-secure-copilot-using-lepide
- 18.Lepide knowledge base: Copilot activities not visible (Graph API and licence requirement) - www.lepide.com/knowledgebase/?page_id=4228382739&slug=microsoft-365-copilot-activities-not-visible-in-lepide
- 19.Lepide compliance (frameworks with pre-built reports) - www.lepide.com/compliance/
- 20.Lepide quote request (pricing structure) - www.lepide.com/quoterequest.html
- 21.Lepide FAQ (trial, deployment, architecture) - www.lepide.com/lepideauditor/faq.html
- 22.Lepide knowledge base: how to configure SharePoint Online auditing (collection interval) - www.lepide.com/knowledgebase/?page_id=4223467530&slug=how-to-configure-sharepoint-online-auditing-in-lepide
- 23.Lepide AI user guide (natural-language search in the web console) - www.lepide.com/knowledgebase/?page_id=4039737372&slug=lepide-ai-user-guide
- 24.UK G-Cloud 14 listing: Lepide Data Security Platform as SaaS for SharePoint Online permissions - www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/754098877773306
- 25.Lepide Microsoft 365 Copilot alignment guide - lepide.com/configurationguide/m365-copilot-alignment-guide.pdf
- 26.Lepide supported platforms - lepide.com/platforms.html
- 27.Lepide Microsoft 365 quick start guide (requested permissions) - www.lepide.com/quick-start-guide/microsoft-365.pdf
Lepide and Lepide Data Security Platform are trademarks of their owner. This comparison was written by 1Security from public documentation and was not reviewed by Lepide. If a row is out of date, write to us and we will fix it.
Richer administration
Beyond the gaps: the same questions, answered deeper.
Where both tools have a feature, the difference is how far the answer goes and whether you can act on it from the same screen, without a server to size first.
Who has access, and why
One graph across every path: direct permissions, sharing links, group membership, site roles, inheritance, apps, agents and guests. Every external organisation that touches your tenant resolved to a real company and reconciled with your trusted-domain settings.
Remediation under control
More than 40 actions on users, sites, files, apps, licences, devices, agents and messages. Each one is staged in a review queue with a grace period, can be reverted, and is read back from Microsoft to prove the change landed.
Compliance without manual mapping
Eleven frameworks today, more arriving: GDPR, NIS2, DORA, the EU AI Act, ISO 27001 and 42001, SOC 2, NIST CSF, HIPAA and the Polish KSC and KRiBSI acts. One requirement counted everywhere it applies, weekly snapshots, a dated evidence pack for the auditor or the investor.
AI agents and Copilot
Not a usage report: what each agent can actually read across files, sites, users and email, who deployed it, what it did, and when it broke its own pattern. Copilot readiness with a fix list and a per-site indexing block, so the rollout starts from a clean reach.
The rest of the tenant
Beyond the comparison: the whole Microsoft 365 stack, from one read-only connection.
The table covers what a Lepide buyer asks about. The same connection opens every screen below on day one, each answering a question your tenant cannot answer about itself today.
- Microsoft 365 Warnungs-ToolEin Warnungsmodell für Richtlinien, Aktivität und Anomalien - mit dem Beweis im Anhang und der Warnlinie in Ihrer Hand.
- Microsoft 365 Monitoring-ToolEchtzeit-Monitoring, das einen Massendownload erkennt, während er läuft - über Benutzer, Dateien, Apps, KI-Agenten und Geräte.
- Copilot Security ToolDer reale Wirkungsradius jedes KI-Agenten - vor dem Rollout quantifiziert, danach beobachtet und begrenzt.
- Schattengeräte-ErkennungJedes Gerät, das Ihre Daten berührt, aus realer Aktivität rekonstruiert - auch die Maschinen, die nie irgendwo registriert wurden.
- Impossible-Travel-ErkennungStandorte als Identitäten, nicht als IPs: Land, Stadt und Netz für jede Aktion, erstmals gesehene Herkünfte, Reiseverläufe mit Urteil - ohne E5, ohne P2.
- Conditional-Access-MonitoringDeklarierter Conditional Access gegen beobachtete Anmeldungen: Abdeckungsurteile, Anteil ungesteuerten Verkehrs und die Bereiche, aus denen Ihre Büros herausgewachsen sind.
- Office 365 ZugriffsverwaltungEffektiver Zugriff, aufgelöst - wer worauf zugreifen kann, über welche Berechtigung, und ein Ort, um sie zu entziehen.
- SharePoint Governance-ToolJede Website nach Exposition und Verwaisung bewertet - Links, Gäste und Copilot-Zugriff unter Kontrolle.
- Office 365 Benutzer-ProvisionierungZugriff über den gesamten Lebenszyklus vom ersten Tag bis zum Offboarding - Reichweite, ruhende Konten und Lizenzrückgewinnung in einem Ablauf.
- Microsoft 365 Audit-ToolBis zu drei Jahre durchsuchbare Aktivitätshistorie - jede Aktion mit Akteur, Gerät und Standort verknüpft.
- Microsoft 365 Inventar-ToolAcht lebende Inventare auf einem Berechtigungsgraphen - einschließlich der Websites, Geräte und KI-Agenten, die nie irgendwo registriert wurden.
- Office 365 ReportingAntworten statt Exporte - Zahlen auf Prüferniveau, gespeicherte Ansichten und eine Nur-Lese-API für Ihr SOC.
- Microsoft 365 DateiberechtigungenWer welche Datei öffnen kann und warum - Menschen, Links, Apps und KI-Agenten auf einer Karte, samt Behebung.
- Erkennung vertraulicher DatenWo regulierte Daten liegen und was sie erreichen kann - zwei Erkennungsmodule, ohne Premium-Lizenz.
- Office 365 E-Mail-ÜberwachungAusgehende vertrauliche Inhalte, Missbrauch von Stellvertreterversand und Verlaufsbelege, die Löschungen überleben.
- Purview-BezeichnungsabdeckungWas Ihre Vertraulichkeitsbezeichnungen wirklich abdecken und welche davon überhaupt schützen.
- KI-Agenten-InventarJeder Agent im Mandanten mit bezifferter Reichweite, geprüfter Blaupause und verifizierbaren Leitplanken.
- KI-DatensperrenErklären Sie einen Datentyp für KI zu gesperrt, und jeder Agent, jede App und jeder Benutzer, die ihn noch erreichen, wird zum Live-Verstoß - festgehalten für den Auditor.
- KI-AusgabenverfolgungInteraktionen, Copilot-Credits und Azure-Tokens in einem Register pro Agent - mit der Ausgabenspalte neben dem, was jeder Agent erreichen kann.
- Microsoft 365 Benutzer-ZugriffsprüfungJede Identität mit Reichweite, Aktivität und der Frage, ob sie bleiben sollte - inklusive der reinen SharePoint-Gäste, die außerhalb des Verzeichnisses leben.
- Gruppen-ZugriffsanalyseWas eine Gruppenmitgliedschaft wirklich freischaltet - Verschachtelung aufgelöst, externe Mitglieder sichtbar, Wirkungsradius beziffert.
- App- und OAuth-Zustimmungs-GovernanceJede App mit Fuß in der Tür: wie sie hereinkam, wer sie hereinließ und was sie wirklich lesen kann.
- BehebungsautomatisierungAus Funden werden Korrekturen in Mandantengröße - vorher gezählt und hinter einem Prüffenster gestaffelt.
- Microsoft 365 LizenzoptimierungDie Plätze, für die Sie zahlen und die niemand nutzt - freie Einheiten, Lizenzen bei Gästen und ruhende Konten.
- Microsoft 365 AnomalieerkennungJede Richtlinie, Person, App und jeder Agent an der eigenen Grundlinie gemessen - mit einer Warnlinie, die Sie sofort verschieben können.
- Office 365 AnmeldestandorteJeder Ort, von dem Ihr Mandant erreicht wird, mit Ihrer Konfiguration für bedingten Zugriff darübergelegt.
- Microsoft 365 ÜberwachungsprotokollWer was wann von wo und auf welchem Gerät - bis zu drei Jahre auf Standardlizenz.
- SharePoint-Website-InventarJede Website, Kanalwebsite und jedes OneDrive in einer Liste, sortiert nach externer Reichweite, Verwaisung und Copilot-Zugriff.
- Microsoft 365 AktivitätsanalyseDie Extreme statt der Durchschnitte - ein Massendownload binnen einer Stunde und alles, was seit einem Jahr ruht.
- Microsoft 365 TrendverfolgungJede Zahl im Mandanten über die Zeit verfolgt, mit Veränderung und Abweichung - und Warnungen am selben Objekt.
- Microsoft 365 Compliance-ÜberwachungReadiness für elf Regularien, gemessen aus Live-Daten des Mandanten - mit wöchentlichen Snapshots und datiertem Nachweispaket.
- Microsoft 365 SicherheitsbewertungMicrosoft Secure Score neben der aus echtem Verhalten gemessenen Bewertung - eine Arbeitsliste, sortiert nach offenen Punkten.
- Externe Domains überwachenJede Organisation, mit der Ihr Mandant Daten austauscht, als reales Unternehmen aufgelöst - mit Drift-Flags und durchsetzbarem Urteil.
- All featuresEvery screen in one list
Fits what you run
Native to Microsoft 365, open to the rest of your stack.
Every action runs through Microsoft Graph, roles sync from Entra, setup takes minutes, and the platform stays read-only until you decide to enable writes. There is no Windows server to build, no SQL Server to size and no agent to install.
A public REST API and an MCP server expose logs, detections, alerts, users and compliance status, so your SIEM, SOC or MSSP receives events that already carry the user, the file, the device, the location and who could reach what, instead of raw audit rows.
Run it as SaaS, in your own Azure subscription with our container images, or on-premise, air-gapped if needed. Each tenant gets its own database, and disconnecting removes the data within seven days.
Savings, last and measured
It runs on the licences you already have, and finds the ones you do not use.
Most of what 1Security does needs no premium Microsoft plan: content scanning without E5 or Purview, locations without premium sign-in logs, three years of history without a SIEM contract, and no servers of your own to run the scans on. On top of that it ranks what you pay for and nobody uses, each item with its idle time and a reclaim action waiting in the review queue.
- Business Basicthe plan most features run on
- 3 yearsof activity history without a SIEM contract
- 0servers to build, patch or size for the scans
- 1 queueunused licences, dead apps, orphaned sites and mailboxes, reclaimed from one place
Keep both or switch
You do not have to choose on day one.
If Lepide covers your Active Directory, file servers and on-premises Exchange or SharePoint, keep it there; nothing we do replaces that. Many teams also keep its compliance report packs and the SQL audit archive the auditor already knows. 1Security takes the Microsoft 365 tenant: agents and Copilot reach, locations and devices, anomalies, the permission graph with its actions, mail leaving with sensitive content, and compliance snapshots across 11 frameworks. The two never fight over the same setting, because 1Security is read-only until you enable actions.
The free proof of concept runs side by side on your own tenant: read-only consent in the morning, first findings the same day on a small tenant, and one meeting to compare what each tool showed.
What the side-by-side POC compares
- Agents and AI apps in the tenant, and what each can reach across files, sites and mail
- Sign-ins and file touches from VPN, Tor, datacenter networks and places nobody works from
- Unknown devices touching data in the last 90 days, and whether Conditional Access covered them
- Anomalies on users, apps and agents from the first scan, without a learning period
- Sensitive data reachable by guests, Anyone links or agents, with the fix staged in the review queue
- Mail leaving with sensitive content and who can send as whom
FAQ
Questions buyers ask when they already run Lepide.
Do I have to remove Lepide to use 1Security?
No. 1Security reads your tenant through its own Entra app with read-only consent and changes nothing until you enable actions. Lepide keeps collecting as before. Teams that keep both usually leave Active Directory, file servers, on-premises Exchange and SharePoint and the compliance report packs with Lepide, and move agent reach, locations, devices, anomalies, Microsoft 365 remediation and the SIEM feed to 1Security.
Which Microsoft licence do I need?
Nearly everything works on Business Basic, Office 365 E1 or Microsoft 365 E3. Content scanning, locations and three-year history need no premium plan. The few features that read premium Microsoft data, such as Purview detections or per-sign-in detail, are listed on the requirements page with what you get without them, and the free licence checker tells you before you connect.
Does 1Security store my file or email content?
No. Content is streamed into the sensitivity scan and discarded when it finishes. What persists is the detection type, the match count and a confidence bucket linked to the file, never the matched values. The data handling page lists exactly what is read and what is stored.
I already classify content with Lepide. Why scan again?
Keep the Lepide classification if your file servers depend on it. In Microsoft 365, 1Security connects each detection to the permission graph, the agents that can reach the file, the sign-ins that touched it and the review queue that fixes it, with no agent server or SQL Server of your own, and reads Purview detections as a second opinion where you have them. The POC puts both result sets side by side on the same sites.
Can the data stay in my own cloud or on-premise?
Yes. Besides SaaS you can run 1Security in your own Azure subscription from our container images, or on-premise, air-gapped if needed. Each tenant gets its own database in every model, and there is no minimum user count for self-hosting.
How does it feed our SIEM or SOC?
Through the public REST API: logs, detections, alerts, security alerts, users, compliance status and Copilot readiness, with scoped API keys per tenant or organisation-wide for MSSPs. The same reads are available as MCP tools. Sentinel and Splunk pairings are described on their own pages.
How do you know what Lepide does and does not do?
From Lepide's public documentation, knowledge base, quick start and configuration guides, datasheets, release history and quote page, each linked under the table with the date we last checked. Where the documentation is silent, the row says “not documented” rather than “no”. If something has changed or we got a row wrong, tell us and we will correct it.
What does the free POC include, and how long does it take?
A read-only connection to your tenant, a full scan, and a comparison meeting. A small tenant shows first results within one to two hours; a tenant with around a million files takes six to twelve hours for the first full map. Nothing is changed in your tenant during the POC.
See both on your own tenant.
Book a demo, then a free side-by-side proof of concept next to Lepide. Read-only consent, first findings the same day, nothing changed in your tenant.
Or keep reading the change log and hope the agent that read the finance site shows up in it.