- 1Tenant
- 2Consent
- 3Scan
- 4Results
Set up your scan
This scan connects to your Microsoft 365 tenant via read-only Graph, Exchange, and Teams APIs to assess compliance with the CIS Foundations Benchmark.
Access code
Bought the full report? Paste your access code — we’ll fill in the tenant it was issued for. No code? Leave this empty and continue with the free scan.
Full report unlocked —
Issued for tenant . The delivery email must be
on .
Find your tenant ID in the Microsoft Entra admin center under Overview › Basic information.
Report delivery
Enter an email address to receive a secure download link when the scan finishes. You’ll verify ownership with a code sent to this address.
A 6-digit code was sent to . Enter it below to confirm your address.
Email verified:
Frequently asked questions
Why not use a free scanner or script instead?
Free scripts usually look at a handful of settings. This scan covers all 160 controls in the CIS Microsoft 365 Foundations Benchmark v7.0.0 (146 automated, 14 manual), scores your compliance, and turns the findings into a prioritised remediation plan — not just a pass/fail list.
Is this secure? What can it access?
The scan only ever reads your tenant’s configuration — it never creates, changes, or deletes anything. Admin consent is scoped to read-only permissions and can be revoked at any time from the Entra admin center.
What happens to my data afterward?
Your report is delivered through a one-time, single-use link protected by an emailed verification code. Report files are deleted a few days after the scan; nothing beyond a minimal per-control pass/fail history is kept, and only for paid-tier trend tracking.
How long does a scan take?
Typically 3–8 minutes. The scan connects to Entra, Exchange, Defender, Purview, Teams, SharePoint/OneDrive, Intune, and Fabric/Power BI in turn.
Can I try it before paying?
Yes — the free tier runs a full scan and gives you a compliance dashboard and your top 5 priority findings, one scan per tenant per day, no access code required.
Who do I contact with questions or bug reports?
Email info@bassline-identity.be and we’ll get back to you.
Grant admin consent
The scan requires a one-time admin consent so it can read your tenant's configuration. No data is modified — all API calls are read-only.
Tenant:
Choose your report tier
The scan assesses all automated controls in the CIS Foundations Benchmark. Results appear in your browser to view and download as soon as the scan finishes.
Quick scan
- Compliance score dashboard
- Section-by-section breakdown
- Top 5 priority findings
- View & download report in-browser
One scan per tenant per day.
Complete analysis
€249 · 3 scans
- Everything in the free tier
- All findings with evidence
- Prioritised remediation plan
- Downloadable XLSX workbook
- Emailed download link (3-day expiry)
Requires an access code.
Enterprise
- Everything in the full report
- Multi-tenant / MSP dashboard
- Scheduled recurring scans
- Priority support
Coming soon
Access code verified
on this code. Your report will be delivered to .
Need an access code?
A code is issued for one tenant ID and only works with a delivery email on the domain(s) it was issued for — usually your own organisation’s domain.
Download your compliance report
Your report is ready. For security, we’ll send a one-time code to the email address you provided when the scan was started.
Enter the 6-digit download code sent to your verified email address. The code is valid for 10 minutes.
Each code is valid for 10 minutes. If your code has expired, click “Send code again” to receive a new one.
Running compliance scan
The scan is connecting to your M365 services and running all automated controls. This typically takes 3–8 minutes.
Initializing…
Scan complete
Your compliance report is ready. View it in your browser or download a copy below. Reports are read-only and contain no changes to your tenant.
Download links are private to this browser session and expire when the report is cleaned up — after 1 day on the free tier, 3 days on the paid tier.
Scan failed
The compliance scan did not complete successfully.