Launching autumn 2026
TRACER365 · Microsoft 365 sharing and permissions auditing
See exactly who can access what across your Microsoft 365 sharing
— with the noise removed. TRACER365 audits external sharing in SharePoint and OneDrive: links anyone can open, files and folders shared with guests, and the access a guest gets through a shared parent folder. Inherited copies of the same access are folded into one finding, so what you review is a list of decisions.
The noise problem
The 200 findings that matter — not the 50,000 you'd wade through
Share one folder with a guest and the files beneath it inherit that access. Built-in reports and raw permission exports can list each of those files as its own row: one exposure, repeated hundreds of times, until nobody reviews any of it.
TRACER365 files each inherited copy under the one grant that caused it, so you decide about the cause once. We call this cascade de-duplication. In our testing, roughly 91% of raw findings collapsed as duplicates. That is what we saw, not a figure to expect from your tenant. What matters is that the list left over, ranked by severity, is one a person can actually work through.
Without de-duplication
With TRACER365
Tenant-wide, read-only, and no extra Microsoft licences
External sharing, audited
Links anyone can open, grants to guests, guest access inherited from a parent folder, and invitations not yet accepted, across SharePoint Online and every OneDrive in one scan.100% read-only
TRACER365 reads your tenant through an app registration you create in your own Microsoft Entra ID, with read-only permissions your security team can check. Nothing in your tenant is changed.Your data stays yours
TRACER365 runs locally, in your environment. Audit data never leaves it — a real data-residency advantage over SaaS scanners for EU organisations.No extra Microsoft licences
No Microsoft 365 Copilot licence. No SharePoint Advanced Management add-on. It works with what you already have.
How it works
Three steps to a defensible answer
01 — Connect, read-only
Create the app registration in your own tenant, with read-only permissions. You or your security team can see exactly what it may read, and that it can change nothing.
02 — Scan with live status
Watch the scan as it runs: which sites and drives are in progress, what has been covered, and what could not be scanned.
03 — Review what matters
Work a severity-ranked, de-duplicated findings list. Schedule email reports, follow trends scan over scan, and give non-IT stakeholders a viewer role.
Compliance
Evidence for the access-control question GDPR already asks you
GDPR Article 32 expects you to control — and be able to show — who can access personal data. TRACER365 produces exactly that evidence for your Microsoft 365 sharing: who can access what, especially externally, on a schedule, delivered to a reviewer.
Know what your tenant is sharing before someone else does
Free 30-day trial at launch — no registration. Until then, get notified the day the installer ships.