How exposed is your Microsoft 365?
Enter your domain and see what attackers see: SPF, DKIM, DMARC and your tenant. Then a short set of yes/no questions on what is not visible from outside. A score and a concrete fix for every gap, in two minutes.
Frequently asked questions
Is the Microsoft 365 check free?
Yes. There is no connection to your tenant and nothing to install. You see the domain scan and your score straight away, before you enter any details.
What does the domain scan look at?
Only public records that every mail server on the internet already sees: your MX records, SPF, DMARC, the Microsoft 365 DKIM selectors, MTA-STS, and Microsoft's public tenant discovery endpoint. We do not sign in to anything or touch the tenant. The domain is not stored unless you ask for the report.
I'm an MSP. Can I check a client's tenant?
Yes. Choose 'A client I manage' and enter the client's domain. The report is written so you can share it with the client. To run this continuously for every client tenant, see the partner programme.
What does the check cover?
Ten controls: MFA for every user including admins, blocking legacy authentication, separate admin accounts with no more than four Global Admins, Conditional Access, the unified audit log, external mail forwarding, SPF, DKIM and DMARC, Defender for Office 365 or an equivalent mail filter, third-party app consent, and external sharing in SharePoint and OneDrive.
Why do you ask for my email address?
To show your gap list with why each control matters and how to fix it, and to send you the report. You only get the weekly Patch this first email if you tick that box.
Is this a full Microsoft 365 audit?
No. It is a self-assessment based on your answers, a snapshot of one moment. Secuno Managed ITDR checks Microsoft 365 and Entra ID posture continuously, for every client tenant, and flags what changes.