Free tool

How secure is your Microsoft 365, really?

A free, two-minute check of your Microsoft 365 security posture, across identity, email, sharing, devices and monitoring. Broader than a one-off ORCA report, and you do not need PowerShell.

Answer the questions and get your score and top gaps straight away. No email, no gate.

Start the snapshot

Identity

Is multi-factor authentication enforced for every user, not just admins?

Is legacy authentication blocked across the tenant?

Do Conditional Access policies control risky or unfamiliar sign-ins?

Are admin roles held by only a few people, with just-in-time elevation where possible?

Email security

Are Safe Links and Safe Attachments turned on for everyone?

Is anti-phishing impersonation protection configured?

Are SPF, DKIM and DMARC all set up for your sending domains?

Is Zero-hour Auto Purge (ZAP) enabled?

Data & sharing

Is external sharing in SharePoint and OneDrive limited to what you actually need?

Do sensitivity labels or data loss prevention protect your most sensitive content?

Devices

Must devices be managed or compliant before they reach company data?

Monitoring & evidence

Is unified audit logging on, and does someone actually review it?

Would you know within a day if one of these settings was quietly changed?

Could you hand an auditor evidence of all of the above today, without a scramble?

0 of 14 answered