100% read-only · built for teams handling PHI

Free automated Microsoft 365 + HIPAA scan

See exactly where your tenant is exposed — in plain English, in minutes. 100% read-only.

No credit card Revoke access anytime Results in under 5 minutes
Spartan Cipher helmet

100% read-only. Your data never moves.

We only read your Microsoft 365 security settings and configurations. We never access emails, files, patient data, or make any changes to your tenant. You can revoke access instantly in the Microsoft Entra admin center.

No ePHI access. No mailboxes, no files, no SharePoint content — only security configuration.
No changes, ever. The scan reads your tenant. It never writes, edits, or deletes anything.
Least-privilege consent. Read-only Microsoft Graph permissions, granted once by your admin.
Revoke in one click. Remove access anytime from the Entra admin center — no email or call required.
How it works

From sign-in to findings in minutes

No installs, no agents, no spreadsheets. Four simple steps.

1

Connect your tenant

Your admin grants read-only consent through Microsoft's own login. Takes about a minute.

2

We scan your posture

Spartan Cipher reviews your Microsoft 365 and Entra security settings against HIPAA safeguards.

3

Get instant results

A clear compliance score, ranked risk alerts, and a plain-English list of what passed and what didn't.

4

Fix & monitor optional

Upgrade to Monitor for step-by-step fixes, exportable reports, and continuous re-scans.

What you'll see

Watch a scan resolve in real time

This is a sample run on demo data. Press the button and see how your free results take shape — score, ranked alerts, and plain-English findings.

--/100
Compliance score
Ready to scan
MFA enforced for all users
Admin accounts protected by MFA
User app consent restricted
Stale accounts disabled
Legacy authentication blocked
Step-by-step fix + HIPAA mapping + verification available with Monitor
  • A compliance score — a single number and letter grade summarizing your posture against HIPAA safeguards.
  • Ranked risk alerts — the issues that matter most, ordered by severity, so you know what to look at first.
  • A full findings list — every check, marked pass, fail, or review, each with a plain-English summary.
  • A downloadable problem summary — a clean PDF of your open issues you can keep on file or share internally.

The free scan shows you what to fix. The exact step-by-step remediation, HIPAA safeguard mapping, and audit-ready reports come with Monitor.

Run it on your tenant
Free vs Monitor

Start free. Upgrade when you're ready to fix.

The free scan is genuinely useful on its own. Monitor turns findings into action and keeps you covered between audits.

Free scan
No credit card
  • Compliance score & letter grade
  • Ranked risk alerts
  • Full findings list (pass / fail / review)
  • Downloadable problem summary (PDF)
Run Free Scan
Recommended
Monitor
Everything in Free, plus continuous protection
  • Step-by-step fixes with the exact portal click-path
  • Each fix mapped to its HIPAA safeguard + verification
  • Exportable reports for audits and your BAA file
  • Continuous re-scans to catch new drift
  • Scan history to show posture improving over time
Start with a free scan

Know where you stand in 5 minutes

Run a free, read-only Microsoft 365 + HIPAA scan and see exactly where your tenant is exposed.

No credit card Revoke access anytime Results in under 5 minutes