Microsoft 365 security audit

Review Microsoft 365 security without changing the tenant.

GraphSec gives MSPs and consultancies a traceable technical security audit: collect configuration evidence, identify open risks and deliver a customer-ready report.

Compare plans

What a useful M365 security audit should show

An audit should document more than individual settings. It should show the source of the evidence, any limits in coverage and the next points to discuss. GraphSec covers 53 controls across identities, app permissions, guests, devices, email, collaboration, data protection, detection and resilience.

Read-only and transparent by design

Collection is designed for read-only access. Missing permissions or licences are reported as not tested, never silently counted as passed. See the exact scope in the control catalog and the scoring logic in the methodology.

A clear customer process

  1. Select the tenant and an appropriate authentication method.
  2. Run the technical review and check coverage limits.
  3. Discuss risks and evidence in the report.
  4. Prioritise actions and keep the report as technical evidence.

GraphSec is technical assessment software, not a legal opinion or a complete ISO, NIS2 or GDPR certification. Review the report demo and requirements before purchase.