Question 1

What is SecurityScore.me?

Accepted Answer

SecurityScore.me is an MSP-focused Security Posture Management platform. It helps managed service providers monitor Microsoft 365 posture, customer assets, findings, alerts and reports from one centralized workspace.

Question 2

Who is SecurityScore.me built for?

Accepted Answer

SecurityScore.me is built for MSPs, IT providers and security teams that manage multiple customer environments.

Question 3

Is SecurityScore.me a replacement for Microsoft Secure Score?

Accepted Answer

No. Microsoft Secure Score provides posture insight inside a Microsoft tenant. SecurityScore.me helps MSPs monitor multiple customer tenants, track changes over time, route alerts and generate customer-ready reports.

Question 4

What can I monitor?

Accepted Answer

SecurityScore.me currently supports Microsoft 365 posture, domains, websites, DNS, SSL and related security findings. Microsoft 365 coverage includes Secure Score, Conditional Access, Defender for Endpoint signals, identity risk, users, licenses and security configuration where permissions allow.

Question 5

How does Microsoft 365 connection work?

Accepted Answer

SecurityScore.me connects through Microsoft Graph using delegated OAuth consent. The integration is designed for read-only posture assessment and monitoring where possible.

Question 6

Which Microsoft permissions are required?

Accepted Answer

Permissions depend on the enabled modules. Common scopes include Organization.Read.All, Directory.Read.All, Policy.Read.All and security-related read permissions for Secure Score, Defender and identity signals.

Question 7

Can SecurityScore.me change my Microsoft 365 tenant?

Accepted Answer

The platform is designed for assessment, monitoring and reporting. It does not perform automated remediation or make configuration changes to customer tenants.

Question 8

What happens if a tenant does not have the required Microsoft licenses?

Accepted Answer

Unavailable data is shown as permission required, license required, or not available where applicable. The rest of the assessment continues where possible.

Question 9

How are MSP teams managed?

Accepted Answer

Each MSP uses an organization workspace. Organization owners and admins can invite team members, manage roles and control access.

Question 10

Can multiple users work in the same MSP workspace?

Accepted Answer

Yes. Users are invited into the organization and share access based on their assigned role.

Question 11

Are permissions role-based?

Accepted Answer

Yes. Access is controlled through organization roles and permissions. Sensitive operations are enforced server-side.

Question 12

Can I control who receives alerts?

Accepted Answer

Yes. Alerts are routed through organization-managed notification policies and alert groups. Individual users can also control whether they personally receive alert emails.

Question 13

How does monitoring work?

Accepted Answer

Monitoring runs scheduled checks on configured assets and creates findings when new, reopened or worsened issues are detected.

Question 14

How are alert emails sent?

Accepted Answer

Alert emails are sent to members of the selected alert group through notification policies. User notification preferences and severity thresholds are respected.

Question 15

Can I route critical and high findings differently?

Accepted Answer

Yes. Notification policies can route findings by severity to different alert groups.

Question 16

Does SecurityScore.me support weekly digests?

Accepted Answer

User preferences include digest settings. Whether digests are sent depends on your organization configuration and enabled notification workflows.

Question 17

What are findings?

Accepted Answer

Findings are prioritized security issues detected across Microsoft 365, domains, websites and monitored assets. They include severity, context and remediation guidance.

Question 18

Can I generate customer reports?

Accepted Answer

Yes. SecurityScore.me can generate customer-ready security posture reports with findings, recommendations and Microsoft 365 context where available.

Question 19

Are reports designed for QBRs and customer reviews?

Accepted Answer

Yes. Reports are intended to support security reviews, remediation planning and customer conversations.

Question 20

Is pricing self-service?

Accepted Answer

No. SecurityScore.me uses custom MSP onboarding and organization-based quotas. Pricing depends on the number of customers, assets, Microsoft tenants, reporting needs and support level.

Question 21

Do you use Stripe checkout?

Accepted Answer

No public self-service checkout is currently offered. Commercial onboarding is handled directly.

Question 22

How do I get access?

Accepted Answer

Request a demo or contact SecurityScore.me. Approved organizations receive access with manually assigned quotas.

Question 23

Can existing accounts still access the old platform?

Accepted Answer

SecurityScore.me is being repositioned. Existing access may change during the transition. Questions can be sent to info@securityscore.me.

Question 24

Is customer data separated by organization?

Accepted Answer

Yes. The platform uses organization-based access controls and server-side authorization checks.

Question 25

Are Microsoft tokens stored securely?

Accepted Answer

Microsoft refresh tokens are encrypted at rest and are not exposed to browser sessions.

Question 26

Do you store customer Microsoft passwords?

Accepted Answer

No. SecurityScore.me uses Microsoft OAuth and does not store Microsoft account passwords.

Question 27

Who can I contact for security or account questions?

Accepted Answer

Contact info@securityscore.me.

SecurityScore.me FAQ

Platform

Microsoft 365

Organizations, users and access

Monitoring and alerts

Reports and findings

Pricing and onboarding

Security and privacy

Still have questions?