Microsoft Secure Score
Where Secure Score and Microsoft's recommendations appear in RevoSecure, and how they feed the action plan.
Updated
Microsoft Secure Score is Microsoft's own measure of a tenant's security configuration. RevoSecure reads it with the read-only SecurityEvents.Read.All permission; any Microsoft 365 tenant with Defender data has one.
Where it appears
- Identity → Secure Score (in the customer's workspace): the current score, its 90-day trend and Microsoft's recommendations, most points still available first. Each recommendation has its category, user impact, implementation cost, the points available, Microsoft's remediation text and an Open in Microsoft link.
- Identity → Overview: the current score next to the tenant's other signals.
- Action plan, under Identity & Microsoft 365: the recommendations become Microsoft recommendations. Low-impact, low-cost actions are placed in the Recommended stage, the rest in Advanced. See Action plan.
Recommendations that don't apply to the tenant are dropped, and retired ones are listed last.
Secure Score and the RevoSecure score
They measure different things:
| Microsoft Secure Score | RevoSecure security score | |
|---|---|---|
| Covers | Microsoft 365 configuration only | Every source: external surface, devices, patching, identity, vulnerabilities, code, dark web |
| Scale | Points out of a tenant-specific maximum | 0–100 with an A–F grade |
| Decided by | Microsoft | Open findings, weighted, against the customer's ideal state |
A high Secure Score with a low RevoSecure grade usually means the problems are outside Microsoft 365. See Severity, risk and the security score.
Freshness
Secure Score is refreshed by the daily identity sync and by Microsoft 365 assessments. Microsoft itself recalculates the score periodically, so a change you make in the tenant can take a day or more to show.