What's your Microsoft 365 tenant's Health Score?
M365 Health Score runs a free, read-only scan of your Microsoft 365 tenant and scores it out of 100 across Secure Score, identity & access risk, email security, and license waste — then shows exactly what to fix first, with the dollar amount next to every wasted license.
Nobody's job is to notice this.
License waste isn't carelessness — it's what happens when nobody's specifically watching.
Onboarding adds, offboarding forgets
Seats get assigned when someone joins. They rarely get reclaimed when someone leaves or changes role.
Plans get layered, not reviewed
Upgrades and add-ons accumulate over renewals. Few teams ever go back and check what's actually being used.
The data is scattered
Checking this manually means cross-referencing several admin center reports nobody has a spare afternoon for.
How it works
Three steps, a couple of minutes of your time.
Connect
Sign in through Microsoft's own admin consent screen. You see and approve exactly what we're allowed to read before anything happens.
Scan
We read license assignments, usage activity, your Microsoft Secure Score, admin roles, guest access, and email authentication records — nothing else — and score what we find.
Report
You get an M365 Health Score out of 100, plus a plain breakdown of every security gap and wasted license, with the fix and savings next to each line.
5 pillars, scored out of 100
One report, built to be handed straight to whoever signs off on security and budget. See a full sample report → · How this compares to Microsoft Secure Score →
Why this is safe to connect
We never see your password
You sign in through Microsoft's own consent screen — the same one you'd see for any admin tool. Your credentials never touch us.
Read-only, by design
The permissions we request can only read license, usage, security, and directory data. There is no permission to change settings, send mail, or touch files.
Revoke it anytime
Remove access instantly from your own Microsoft 365 admin center — no need to contact us, no delay.
Only what's needed to build your report
We retain the aggregated license data behind your report. We don't store mailbox content, files, or message data — because we never ask to see them.
Built by someone who's done this audit by hand, too many times.
M365 Health Score is built by Jabez Gan, a former Microsoft MVP (Windows Server) and the technical lead behind Zepto Consulting, an IT consultancy specializing in the Microsoft stack. After running license audits manually for clients for years, this is the tool he wished existed — built to do in minutes what used to take an afternoon of cross-referencing admin center reports.
Know your tenant's M365 Health Score
License waste, identity risk, Secure Score, and email security — scored out of 100. No contracts. Pay once, or monitor monthly.
Quick check
- — Your overall Health Score
- — Total estimated monthly waste
- — No itemized breakdown
- — Ready in minutes
Full Health Score report
- — 13 checks across 5 pillars: license, identity, Secure Score, data exposure, email security
- — Full PDF report + downloadable Excel issue tracker for your IT team
- — Every finding listed in full — nothing truncated
- — Prioritized action roadmap (this week / month / quarter)
- — Emailed to you the moment it's ready
- — 14-day money-back guarantee, no questions asked
Monthly monitoring
- — Tenant re-scanned monthly, both files refreshed
- — Health Score trend over time
- — Alerts on new findings across all 5 pillars
- — Cancel anytime
🔒 Payments secured by PayPal · Not happy with your report? Email [email protected] within 14 days for a full refund — no questions asked.
Questions, answered plainly
Is it actually safe to connect this to our tenant?
Yes. You connect through Microsoft's own sign-in and admin consent screen — the standard flow used by any Microsoft 365 add-on. We only ever request read-only permissions, and you can see exactly what's being requested before you approve anything.
What permissions do you actually request?
Read-only access to license assignments, usage reports, and basic directory structure. That's it — no access to email, files, Teams messages, or the ability to change any setting.
Will this change anything in our Microsoft 365 environment?
No. The scan only reads data. It cannot deactivate accounts, reassign licenses, or modify any policy or setting in your tenant.
Who needs to run this — does it have to be IT?
You'll need a Global Administrator or Global Reader role to connect. Many teams have their IT provider or in-house admin do this in a couple of minutes.
How long does it take?
Connecting takes about two minutes. The report itself is generated within minutes of the scan completing.
Can we revoke access afterward?
Yes, instantly — directly from your Microsoft 365 admin center, with no need to contact us first.
See what you're actually paying for.
Connect your Microsoft 365 tenant and get your total monthly waste in minutes — free.
Run a free scanRead-only access. Nothing in your tenant is changed.