CY Cyber — M365 Security

Before you sign in

Signing in with Microsoft lets Cyber — M365 Security read (but never write) the tenant data listed below. Every permission is read-only. You can revoke consent at any time from the Entra admin center.

✓
User.Read
Identifies you to Cyber — M365 Security — name, UPN, tenant. Standard sign-in.
✓
Sites.Read.All
Lists SharePoint sites and their sharing links so we can flag over-exposed sites. Does not read file contents.
✓
Directory.Read.All
Reads user, group, and role membership — needed to find admins without MFA and admin sprawl.
✓
AuditLog.Read.All
Reads recent sign-in and audit events to detect suspicious activity and policy gaps.
✓
Policy.Read.All
Reads Conditional Access and authorization policies for the posture module.
✓
Application.Read.All
Lists third-party OAuth apps consented in the tenant to flag unverified publishers.

What we never store. File contents, share URLs, and access tokens are explicitly excluded from our database — the SAFE-payload rule is codified in our Privacy Policy. You can scan in under 10 minutes, see what's exposed, and decide whether to subscribe — no credit card required.

Back to the landing page

Questions? Read the Privacy Policy or the Terms of Service. To revoke the application's access at any time, sign in to the Microsoft Entra admin center and remove the Cyber app's permissions.