Benchmarks

Five baselines. One audit.

M365Audit runs the same security frameworks your auditors, insurers, and clients already recognize — CIS, CISA SCuBA, EIDSCA, ORCA, and community best practices. Pick the frameworks that matter to a tenant and get one report.

CIS M365

Industry Standard

CIS Microsoft 365 Foundations Benchmark v3.1.0 — 60+ tests across Entra ID, Exchange, Teams, and SharePoint.

Learn more →

CISA SCuBA

US Government

US CISA Secure Cloud Business Applications baselines — 70+ tests covering identity, access, devices, and apps.

Learn more →

EIDSCA

Entra ID

Entra ID Security Config Analyzer baseline — 60+ tests from the Microsoft Entra ID Attack and Defense Playbook.

Learn more →

ORCA

Exchange

Office 365 Recommended Configuration Analyzer — comprehensive Exchange Online security configuration checks.

Learn more →

Community

Best-practice tests curated by the security community — 170+ tests covering the full M365 attack surface.

Learn more →

Audit a tenant against all five.

One audit credit covers a full pass across every framework you select. Credits never expire.

Start an audit →See pricing