First-Look

Free assessment · no account needed

First-Look Assessment

What can the apps and agents in your Microsoft 365 tenant actually reach? We start with what is public — you can check every line of it yourself — and only then ask for read-only access to look further.

Assessing a customer through GDAP?
Approval happens on Microsoft’s own screen, not here.
What we ask for

Configuration only. Nothing is written.

  • One read-only consent, granted by an administrator of your tenant, through Microsoft’s own screen. You approve it there, not here.
  • Configuration only. App registrations, permission grants, policies, license and role assignments. No mail, no files, no documents, no message content.
  • Nothing is changed. Every permission is a read scope — there is no button in this assessment that writes anything to your tenant.
  • Revoke whenever you like, from your own Entra admin center. This stops future access to Microsoft data. Saved preview results expire after 7 days; revocation does not delete them.
What you get back

What your tenant can already reach.

  • What the apps and agents in your tenant can already reach — including the ones holding access nobody reviews.
  • Shadow AI in use, and which of those tools keep a token when the user is away.
  • Where a phished password would land — MFA coverage, legacy authentication, Conditional Access as it actually stands.
  • What is already working, evidenced — not the absence of a finding.
  • Where you stand against the standards, each control traced to the object it was read from. Offered, never a certification claim.
  • Every figure opens to the objects behind it, with the endpoint and the day we saw it. Nothing is summarized at you.

What this is, and what it is not

  • Read-only by construction. Every permission we request is a read scope. There is no button anywhere in this assessment that changes anything in your tenant.
  • Configuration only. We read app registrations, permission grants, policy and license counts. We do not read mail, files or documents.
  • It tells you what it could not see. A first look cannot measure roughly two-thirds of a full AI-readiness picture, so it does not produce an overall score. It names each gap and what would close it.