Skip to main content

Free self-assessment

Microsoft 365 Security & Baseline Checkup

Eight plain-English questions to spot likely gaps in sign-in protection, email security, file sharing, and license spend. About two minutes.

100% anonymous and runs in your browser

No passwords, credentials, company names, domains, or email addresses are requested. Your answers are not stored or sent anywhere, and they disappear when you close this page. This is a self-reported checklist, not a scan of your tenant.

1 of 8 · Identity & Access

How do administrators sign in to your Microsoft 365 tenant?

2 of 8 · Identity & Access

Is multi-factor authentication enforced for all employees and contractors?

3 of 8 · Email & Domain Protection

Are legacy sign-in protocols (POP3, IMAP, SMTP AUTH) blocked across the tenant?

4 of 8 · Email & Domain Protection

How is your domain's email authentication set up?

5 of 8 · Email & Domain Protection

Can mailboxes automatically forward email to outside personal accounts (like Gmail)?

6 of 8 · Data Sharing & Licensing

How are external sharing links set up for company files?

7 of 8 · Data Sharing & Licensing

How are former employee accounts and unused licenses handled?

8 of 8 · Identity & Access

Do you have at least one emergency "break-glass" admin account?

0 of 8 answered