Is the Microsoft 365 security scan really free?

Yes. The scan is 100% free with no credit card required, and you can re-scan as your configuration changes. The one paid product is Operación — continuous monitoring with approval-gated remediation.

What data does the scan access?

Read-only access, scoped to security configuration only: MFA and Conditional Access policies, email authentication (SPF/DKIM/DMARC), sharing settings, device compliance, the user directory and sign-in logs. We never read your emails, calendars, files, or contacts.

How many security rules does the scan check?

The detection library has 201 rules. The free Audit evaluates the 155 that run via Microsoft Graph — identity (MFA, Conditional Access), email (SPF, DKIM, DMARC), data protection (DLP, external sharing) and devices (Intune, Defender). The 46 Azure Resource Manager rules covering Azure infrastructure are evaluated when you connect with admin consent and Reader access (Operación).

How long does the scan take?

The on-screen preview usually appears within a couple of minutes of authorizing access (larger tenants can take longer because Microsoft Graph is rate-limited); the full Audit report is delivered in under an hour. No installation or configuration required.

Does the scan work with any Microsoft 365 plan?

Yes — Business Basic, Business Standard, Business Premium, E3, E5. The scanner adapts its rules based on your license level.

Cargando…

FREE AUDIT

Connect your Microsoft 365 + Azure. See what we'll operate for you.

Connect your Microsoft 365 + Azure tenant and in a few minutes we show you exactly which configurations we should fix for you. The free Audit evaluates the 155 Microsoft Graph rules of the 201-rule library; the 46 Azure Resource Manager rules are added when you connect with admin consent. No installations. No permanent access. Read-only.

What data will we access?

MFA & Conditional Access policies
Email authentication (SPF/DKIM/DMARC)
User directory and roles
Sign-in logs
Device inventory
Security configuration

Read-only access. We don't access or store email, file, or chat content. We do store scan metadata — findings, score, and report — to deliver your results. You can revoke access anytime.

Work email

We use this email to send you your scan results. No spam.

Phone (optional)

We only keep it in case we need to confirm something about your scan. No campaigns, no promotional messages.

Read-only

AES-256 encrypted

Disconnect when done

Want to see what you get first? See a sample report →

Cargando…

FREE AUDIT

Connect your Microsoft 365 + Azure. See what we'll operate for you.

Connect your Microsoft 365 + Azure tenant and in a few minutes we show you exactly which configurations we should fix for you. The free Audit evaluates the 155 Microsoft Graph rules of the 201-rule library; the 46 Azure Resource Manager rules are added when you connect with admin consent. No installations. No permanent access. Read-only.

What data will we access?

MFA & Conditional Access policies
Email authentication (SPF/DKIM/DMARC)
User directory and roles
Sign-in logs
Device inventory
Security configuration

Read-only access. We don't access or store email, file, or chat content. We do store scan metadata — findings, score, and report — to deliver your results. You can revoke access anytime.

Work email

We use this email to send you your scan results. No spam.

Phone (optional)

We only keep it in case we need to confirm something about your scan. No campaigns, no promotional messages.

Read-only

AES-256 encrypted

Disconnect when done

Want to see what you get first? See a sample report →