Find the security gaps and wasted licenses in your Microsoft 365.
A read-only scan that takes about a minute. See your grade and every issue for free. The full report with names, costs and step-by-step fixes is $79.
Scan my tenant →Requires a Global Administrator to approve read-only access. Works with Business Basic, Standard, Premium and E-plans.
Security basics
Is MFA actually enforced? Which admins have no second factor? Is legacy sign-in still open? How many Global Admins do you have?
License waste
Seats you pay for but never assigned, licenses stuck on blocked accounts, and users who haven’t signed in for 90 days, priced per month.
Stale accounts
Former staff who can still sign in, accounts nobody has ever used, and guests who kept access after the project ended.
Sharing & email
“Anyone” links, inbox rules forwarding mail to outside addresses, and SPF, DKIM and DMARC on every domain.
Built so you don’t have to trust us much
- Read-only.The app can’t change, send or delete anything in your tenant.
- Never reads email.It looks at inbox rules, not messages.
- No stored credentials.Each scan gets a fresh token from Microsoft; nothing that grants access is saved.
- Results expire in 14 days.Or delete them yourself the moment you’re done.
Exact permissions and how to remove access afterwards: Privacy & permissions.