One operating layer for
Microsoft 365 security posture
Assess Microsoft 365 and Entra ID posture, prioritise remediation, monitor drift, and produce evidence that stays current between reviews.
Read-only OAuth connection · No agents · No password collection · No tenant changes during scanning
One page for what changed, what matters, and what you can evidence
Score movement, open findings, priority actions, framework readiness, and what changed between completed scans — on one page.
Stored in the UK
Hosted in London. No US round-trip.
Read Your dataZero write scopes
Every Graph permission is read-scoped.
Read SecurityVerified publisher
Visible in the Global Admin consent screen.
Read Security8 vendors, listed
Each one named, with purpose and region.
Read Sub-processorsFramework readiness
Eight readiness views, defensibly bounded
Findings re-projected against eight recognised frameworks. Each view shows observable readiness within ScanPosture’s assessment scope — not certification, not audit sign-off.
Explore framework readiness
Observable readiness, not certification or audit outcome.
Microsoft 365 posture is hard to
evidence from admin centres alone
Security-relevant settings live across multiple Microsoft portals, policies, users, groups, applications, collaboration controls, audit settings, and device signals. Reviews become slow, inconsistent, and difficult to evidence.
Fragmented visibility
Important posture signals are spread across Entra ID, Microsoft 365 admin surfaces, security settings, collaboration controls, and device posture.
Weak prioritisation
Raw findings do not tell teams what to fix first. ScanPosture focuses attention on control weakness, severity, and estimated posture impact.
Stale evidence
Screenshots and spreadsheets age quickly. Recurring scans create evidence that can be refreshed and compared over time.
Built differently to do this properly
A control-assurance operating layer for Microsoft 365 — not another scanner, not a static report, and not yet another dashboard.
Control model, not raw checklist
Findings are weighted by control impact and posture-score movement, so teams focus on the changes that actually move readiness — not the longest issue list.
Drift over snapshots
Each completed scan compares against the previous. New, returned, resolved and changed findings are surfaced explicitly — improvement is provable, not asserted.
Evidence-led, not screenshot-led
Every output is dated, comparable and exportable. Replaces ad-hoc spreadsheets and one-off consultancy reviews with refreshable evidence.
MSP-ready operating layer
The same engine that powers a single tenant powers the multi-tenant fleet view. Branded reports, per-client drift and recurring service evidence are first-class.
From connection to evidence, in four steps
Connect Microsoft 365
Read-only OAuth consent. No agent. No password collection.
OAuth · Read-only
Run a posture scan
ScanPosture assesses observable controls across Microsoft 365 and Entra ID.
201 checks
Review risk and readiness
See posture score, priority actions, framework readiness, and what changed.
Score · Actions
Maintain assurance
Refresh evidence, monitor drift, and track improvement over time.
Drift · Trend
Posture score, open findings, and what changed this scan
ScanPosture turns technical signals into a readable posture view. Each scan produces a structured set of artefacts that teams, leadership, and assessors can act on.
Posture score
A weighted score across 9 control domains, with movement vs the previous completed scan.
Open findings
Grouped by severity (critical / high / medium / low) with affected counts and trend.
Priority actions
Ranked by estimated score impact so teams fix the changes that move readiness most.
Affected controls
Findings rolled up to the control they evidence, across identity, access, apps and audit.
Framework readiness
Eight readiness views — observable alignment within ScanPosture’s assessment scope.
Evidence and reports
Executive summaries, framework readiness packs, evidence snapshots, exportable findings.
Priority actions with remediation detail
ScanPosture highlights the actions most likely to improve the overall ScanPosture score. Each action links to the affected control, severity, evidence, and remediation guidance.
Require MFA for all users
Identity & Authentication
Block legacy authentication
Conditional Access
Review privileged role assignments
Privileged Access
Restrict anonymous sharing
Data Access & Collaboration
Estimated impact on overall ScanPosture score shown — not on any individual framework readiness view.
What changed since the last completed scan
Every scan is compared against the previous completed scan, so teams can see what is new, what returned, what was resolved, and what changed.
First detected in the latest completed scan.
Seen historically before, absent in the previous completed scan, present again now.
Present in the previous completed scan, absent from the latest completed scan.
Existing finding or control state changed severity, evidence, scope, or affected objects.
Read-only by design
Read-only access. No agents. No tenant changes.
ScanPosture connects via Microsoft OAuth with read-only permissions. Configuration and posture signals are assessed — policies, users, roles and tenant settings are not changed during scanning.
No passwords collected
OAuth-only. ScanPosture never stores or processes Microsoft account passwords.
No agent deployment
Cloud-side only. Nothing to install on endpoints, servers or domain controllers.
No write permissions
Every Microsoft Graph permission ScanPosture asks for is read-scoped. Verifiable in the consent screen.
Visible at consent
Your Global Administrator sees the full permission list before granting access.
No silent remediation
Findings are surfaced. Nothing is automatically changed. Future write actions require explicit authorisation.
Removable connection
Customers can revoke ScanPosture’s tenant access at any time from the Microsoft admin centre.
One platform, two operating models
Run posture against your own Microsoft tenant — or operate recurring assurance across every customer tenant you manage.
Partner — fleet view across managed tenants
Direct customer
For Microsoft-first organisations
Understand control posture, prioritise remediation, and produce current evidence without relying on spreadsheets or one-off reviews.
View platformPartner
For MSPs
Monitor customer posture, produce recurring evidence, support service reviews, and show improvement across managed tenants.
Explore MSPSee what changed, what matters, and what evidence you can defend.
Built for Microsoft-first SMBs and MSPs that need clearer posture evidence without enterprise complexity.
From £350 / month · Per Entra user, not per administrator · Ex VAT — cancel any time