Maintaining tenant resilience against potential breaches is an ongoing challenge. Microsoft’s native tools are complex, time-consuming to master, and offer no clear, at-a-glance visibility into whether critical security policies are consistently enforced.
Quickly check whether your Microsoft 365 tenant is configured securely with the Tenant Security Scanner.
The tool instantly analyzes your setup against CIS Microsoft 365 v6.0.0 guidance, showing how you measure up across critical controls and pinpointing exactly where to focus your remediation efforts.
Resource-level misconfigurations can have a major impact on your tenant’s security. The Microsoft 365 Tenant Security Scanner evaluates policy enforcement across seven categories and 35 key resources.
Assess users, admins, and Entra app service principals by criticality and number of violations, and quickly identify the areas that need immediate attention.
This tool uses a PowerShell script to scan your tenant against CIS Microsoft 365 v6.0.0 guidance and key Microsoft best practices. It also performs targeted resource-level checks on users, admins, and Entra applications.
Download the compressed file and unzip it on your workstation.
Review the README.md file — it contains important information about prerequisites and installation instructions.
Open an elevated PowerShell session, navigate to the Release folder, and run the following command:
./Generate-SecurityReport.ps1 -OutputPath "./reports/security-assessment.html"
Open the generated security-assessment.html file to view your results.
The report includes your overall tenant security score, along with a detailed breakdown of compliance levels, criticality, and the number of policy violations.
If your score is below 80% or you need assistance addressing any findings, contact our security experts for guidance.
