Audit and harden Microsoft 365 — oversharing, privileged access, Copilot readiness, Teams governance, security posture. Twenty-five tools, zero-knowledge.
About this edition
Twenty-five tools covering oversharing, privileged access, Copilot readiness, governance, lifecycle, and posture. Heavy reads run locally on the desktop SKU; results stay on your device.
Microsoft Secure Score and Copilot readiness scoring built in
External-collaboration, sharing-link, and permission-inheritance reports
Run audits locally on the desktop SKU; share encrypted result bundles with stakeholders
Who it's for
Security analyst. Need a daily snapshot of high-risk oversharing and external-collaboration changes across the tenant — Scheduled audit runs land encrypted reports on your device; diff yesterday vs today without granting vendor read access.
Copilot rollout owner. Blocking Copilot until oversharing risk is below threshold — Copilot Readiness tool quantifies the risk surface so you can demonstrate exactly which sites still need work.
IGA / access-review lead. Running quarterly access reviews and privileged-access certifications — Privileged Access, Access Review, Orphaned Users, and Unique Permissions tools cover the IGA lifecycle end-to-end.
Edition identity
SKU id: security.
Tools included: 25.
Tagline: Run 25 security, audit, lifecycle, and management tools across your tenants..
Limitations & out-of-scope
Watchtower: Watchtower is a detective control: findings are reported, never auto-remediated. Severity rankings use the documented heuristic and may diverge from Microsoft Secure Score. Coverage stops at the Graph permission surface granted — workloads behind tenant-licensed add-ons (Defender XDR, Purview eDiscovery Premium) require the matching license.