Sign in with your Microsoft 365 admin account and in about a minute we'll check the settings behind most break ins: multi factor sign in, old style sign ins, admin accounts, file sharing, your email domain and Microsoft's own Secure Score. You get a score, a grade and a plain English action plan.
The self service scan is opening very soon. Until then we'll run it with you on a short call, free.
Whether everyone has to use multi factor sign in, whether old email apps that skip it are blocked, who has set it up, how many Global Administrators you have, how files can be shared outside the business, your SPF, DKIM and DMARC email records, and your Microsoft Secure Score with the actions that would raise it most.
Your emails, files, chats, calendars or passwords. Every permission we ask for is read only and about settings, not content. We use Microsoft's sign in once, straight away, and don't keep it, so we have no way back in after the scan.
Someone with the Global Administrator or Global Reader role. The first time, Microsoft asks a Global Administrator to approve read only access for your organisation: tick "Consent on behalf of your organisation". Not sure who that is? We can run it with you.
Book a free review ↗You get a private report link to keep or share with whoever looks after your IT. We keep the report for 90 days so we can talk it through with you, and you can delete it from the report at any time. Running the scan also lets us follow up once about the results; see our privacy policy.
Microsoft keeps a record that you approved our app. To remove it, open the Microsoft Entra admin centre, Enterprise applications, find the Aster IT security scan, then Properties, Delete. It can't do anything without someone signing in again, but tidy is good.
A free technology review. We map your systems, flag the risks and tell you what we’d do first. No obligation to move anything to us.