Download read-only PowerShell assessment scripts, offline HTML fleet reports, before/after evidence comparison, Azure Resource Graph queries and an adoption register.
Checklists, tools and scripts
Free community resources
Practical material for people responsible for Microsoft 365, identity, infrastructure and security. Published resources explain what they inspect, what permissions they need, the versions tested and their limitations.
Public beta
Microsoft 365 security assessment
I am building a free assessment tool for small and medium-sized organisations that need a practical view of their Microsoft 365 security configuration.
The collector has automated and lab validation and is now available for authorised testing in non-production environments. The project documents its checks, permissions, evidence handling and known limitations. It is a community tool, not a commercial assessment service.
Release principles
- Read-only collectionNo configuration changes during an assessment.
- Least privilegeEvery requested permission will be listed and explained.
- Local evidenceReports remain under the operator’s control by default.
- Actionable findingsEach finding will include risk, evidence and validation guidance.
- Transparent scopeSkipped checks and incomplete evidence will be visible.