Entra ID
Review authentication configuration, MFA registration, privileged roles, application consent and credential expiry.
Protect Identity | M365 x Azure Security Scan
M365 × Azure
Security Scan
Turn Microsoft 365 and Azure security evidence into prioritized findings, practical recommendations and verifiable follow-up. Give security and platform teams a shared view of posture, coverage and remediation progress.
Core capabilities
Bring security evidence into focus.
Exchange Online
Assess forwarding, audit and delegation settings through supported read-only collection.
Teams & sharing
Review Teams policies and SharePoint or OneDrive sharing configuration in the connected tenant.
Intune
Bring available managed-device and compliance evidence into the assessment and investigation workspace.
Azure resources
Assess authorized subscriptions and supported resource configuration, including Storage, Key Vault and AKS checks.
Microsoft Defender
Collect enabled recommendations, alerts and vulnerability evidence, including CVEs, affected resources and provider fixes.
In practice
A clear operating workflow.
Connect the initial context, the operational decision and the evidence you review.
Connect and assess
Choose the tenant and authorized subscriptions. Run manually or schedule recurring assessments.
Investigate in context
Filter findings and inventory, search CVEs and inspect affected identities, applications, devices and resources.
Review remediation
Use recommendations and verification steps, with a separate approving actor for proposals. Your team applies the changes.
Rescan and report
Compare runs to distinguish verified improvements, regressions, new findings and lost coverage. Export PDF, CSV and JSON reports.
The connected offering
Add identity context
to the investigation.
Explore how the products work togetherConnect selected Entra identities to accessible IGA role, organization and owner context through immutable identifiers. Access certification stays in IGA, privileged asset access stays in GovPAM, and assessment evidence uses a dedicated customer database.
Read-only collection requires approved permissions and relevant Microsoft service plans. Missing evidence is shown as not assessed. Vulnerability evidence comes from enabled Microsoft Defender assessments; the product does not launch an active host or network penetration test.
Before you get started
Questions,
answered.
Which Microsoft services are covered?
The control catalog includes Entra, Exchange, Teams, SharePoint and OneDrive, Intune, Azure resource configuration and enabled Defender security evidence. Coverage depends on connected services, approved permissions and active Microsoft entitlements.
Does the scan change Microsoft policies?
No. Collection is read-only. The product supplies recommendations, remediation review and rescan verification; your team executes configuration changes.
How are missing permissions handled?
Incomplete or unavailable datasets are explicitly shown as not assessed, with collection reasons and next actions. A failed collection cannot produce a clean result.
Protect Identity Solutions
See M365 × Azure Security Scan in action.
Build a demonstration around your environment, operating priorities and evidence requirements.