“`html
Coreview Launches Free Microsoft 365 Tenant Security Scanner
Microsoft 365 specialist Coreview has released its free “microsoft 365 Tenant Security Scanner.” The tool analyzes Microsoft 365 tenant configurations against the Center for Internet Security (CIS) Microsoft 365 v6.0.0 benchmarks and best-practice Zero Trust principles. This provides security professionals with a clear understanding of their security posture and enables targeted remediation efforts.
Beyond Traditional Assessments
Unlike traditional, manual portal-based assessments of areas like Entra ID, Conditional Access, authentication methods, and guest access, Coreview’s scanner utilizes PowerShell. It generates an offline HTML report detailing the overall security assessment, including a prioritized breakdown of findings. The report focuses on actionable and impactful controls, such as disabling legacy authentication methods and enforcing robust Multi-Factor Authentication (MFA).
The scanner also highlights potential risks related to new tenant creation, guest accounts, and collaboration invitations.
Addressing Common Misconceptions About Microsoft 365 Security
“Protecting the Microsoft 365 tenant is a continuous challenge. Microsoft’s native tools are complex and can be difficult to use, and they don’t always provide a clear overview of whether critical security policies are consistently enforced,” explains Carlos Ferro, Vice President EMEA Sales at Coreview.”With our scanner, we’re giving security professionals an effective tool to quickly and easily identify and address vulnerabilities.”
Recent findings from Coreview’s report, The State of Microsoft 365 Security 2025,reveal notable misconceptions regarding basic Microsoft 365 security features.Such as, half of IT professionals globally incorrectly believe that Microsoft automatically creates backups of M365 tenant configurations. TechTarget reported on this finding, emphasizing the need for proactive backup strategies.
Key Features and Benefits
- CIS Benchmarks Alignment: Assesses configurations against the industry-respected CIS Microsoft 365 v6.0.0 standards.
- Zero Trust Focus: Incorporates Zero Trust principles to identify vulnerabilities related to least privilege access and continuous verification.
- PowerShell-Based