Secure Score

Microsoft Secure Score (at security.microsoft.com/securescore) is a numeric score of a tenant's security posture against Microsoft's recommended security controls. Each recommended action is worth points; implementing it raises the score. The portal lists current score, score over time, comparison to similar organisations, and a prioritised backlog of actions covering Microsoft 365 apps, identity (Entra ID), endpoints (Defender for Endpoint), and apps. Secure Score isn't an exhaustive measure of security — it scores configuration against Microsoft's defaults — but it's a useful planning backlog. Many security teams treat the next 10 unimplemented actions as their next quarter's workload.