The CIS Tool — CIS Microsoft 365 Benchmark Audit

Sign in with your Microsoft Entra account to audit your tenant against the CIS Microsoft 365 Foundations Benchmark v7.0.0 — live from your browser, read-only, with HTML and Word report downloads.

Everything runs in your browser — there is no backend and your tenant data is never stored. Sign-in uses Microsoft Entra with PKCE; tokens are session-only and requests go exclusively to graph.microsoft.com (plus dns.google for SPF/DKIM/DMARC record checks and, optionally, api.fabric.microsoft.com for the Power BI controls). Controls that Microsoft exposes only to Exchange, Teams or SharePoint PowerShell are reported as Manual with the exact audit command and portal path.

Audit scope

Report

The CIS Tool — CIS Microsoft 365 Benchmark Audit

Audit scope

Report

What's new