Free Copilot exposure scan
Find out which payroll, patient, password and customer files Microsoft 365 Copilot could show to people who should never see them, before someone asks. You run a read-only scan with us on a call. Your data stays with you.
What you get
A short report you can forward to your CISO or DPO, and a plan your administrators can start on the same day.
Your Copilot safety score
The share of your sensitive files that only the right people can reach, and how many any employee could ask Copilot about today.
The sites that reach too far
Each site holding sensitive files, who can reach it (everyone, a company-wide group, links or guests) and why, ranked by exposure.
A fix plan sorted by disruption
Fixes that no one will notice, fixes that need your approval, and fixes that need the site owner, each with the script line to run it.
A walkthrough with you
We go through the results together on a call and answer questions. The report summary is yours to keep.
How it works
Agree the scope
A 30-minute call to confirm the scan suits your tenant and who needs to be on it.
Run the read-only scan
Your administrator runs Radius on their own computer with their own sign-in, with us on the call. It reads permissions, sharing links and Purview's sensitive-information matches. Nothing in the tenant changes.
Review it together
The scan writes one file on your computer. You open it in the Radius app in your browser. It is never uploaded and Cloudly Move doesn't receive a copy.
What we need from you
| Tenant | Microsoft 365 with SharePoint Online and OneDrive. Microsoft Purview sensitive information types, which every Microsoft 365 tenant has. |
|---|---|
| A person | An administrator with the Purview Content Explorer List viewer role and read access to SharePoint sites. A SharePoint administrator can read every site. |
| A computer | Windows with PowerShell 7.4 or later. Radius installs two Microsoft PowerShell modules for that user only. |
| Permissions | A one-off app registration in your tenant with read-only delegated permissions. Exactly what Radius reads. |
| Time | The 30-minute scoping call, the scan itself (its length depends on how many sites hold sensitive files), and a one-hour walkthrough. |
After the scan
Most organisations fix the worst exposures themselves from the plan. If you'd like help, these are the usual next steps.
- Free
Exposure scan
The scan and walkthrough on this page.
- Fixed price
Fix sprint
We apply the safe fixes with you, work through the approvals with site owners, and re-scan to show the score moving. Quoted from your scan results.
- Fixed price
Copilot guardrails
Sensitivity labels, Purview DLP for Copilot, sharing defaults and a scoped pilot group, so new oversharing doesn't build up again.
- Monthly
Keep it fixed
A re-scan and a one-page report every month, with new exposures sent to the owners who can fix them.
Questions
Is it really free?
Yes, while Radius is in private preview. We learn from every scan, and you get the results. There's no obligation to buy anything afterwards.
Will Cloudly Move see our data?
Only what your administrator shows on screen during the walkthrough. The scan file stays on your computer and opens in your browser without being uploaded. The scan lists file names and where they're shared; it never opens or copies file contents.
Can the scan change anything?
No. Every call Radius makes to your tenant goes through a list of read-only commands, and anything else is refused. Fixes are written to a script that your administrator reviews and runs, if and when they choose to.
We haven't bought Copilot yet. Is this still useful?
Yes. It's the best time to run it. The same exposure applies to Microsoft Search and to anyone who knows where to look, and fixing it first makes the Copilot pilot safer.
How is this different from Microsoft's own reports?
SharePoint Advanced Management reports list sites and links. Radius joins them with Purview's sensitive-information matches, so you see which sensitive files are exposed and to whom, ranked, with a fix for each. Microsoft's oversharing blueprint is the plan; Radius shows where your tenant stands against it.
Not sure where to start?
Book a 30-minute call and tell us what worries you about Microsoft 365: oversharing, an audit, or a Copilot rollout. Or email us and we'll reply within one working day.