Where do I find the Microsoft Secure Score a cyber insurance form asks for?
One form asks Microsoft 365 users for their Microsoft Secure Score and gives the address where an administrator can read it.
Last read from the sources at the foot of this page.
What exactly does the form ask?
These are the form's own words, with the page they come from.
If you are an Office 365 user, please provide your Microsoft Secure Score (administrators can find the score using the following link https://security.microsoft.com/securescore):
What does it mean for a small firm?
It is a score Microsoft shows to the administrators of a Microsoft 365 account. Only an administrator can open the page.
How do I answer it truthfully?
Sign in with an administrator account at the address the form gives and copy the score. Write the date beside it, because the number changes as settings change.
Can an outside reading check this?
Your MX records are public. They show which service receives your mail, and whether it passes through a separate filtering service first. That tells you whether the question applies to you.
An outside reading cannot see the score: only your administrators can open it.
Where does this come from?
- Victor Insurance Managers, Cyber insurance application (Sept. 8/23)victorinsurance.caRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/