Optional step for your Scorecard
A few numbers from your own admin console. No access to your systems.
This step is optional. Without it, your Scorecard uses your answers and your public footprint, and marks what it can't see as not measured. With it, more of your security baseline and your unused licenses are measured from your own numbers.
On Microsoft 365
Your Secure Score and three answers. Nothing else.
If you're not sure of a number, say so. We'll mark that part not measured rather than guess. On Google Workspace? Send three numbers instead.
| What | Where it usually lives | What it measures |
|---|---|---|
| Secure Score | The Secure score page in the Microsoft Defender portal: your score, and its recommended actions as an export or screenshots. Steps below. | Your security baseline, from your own tenant's recommended actions. |
| Licensed users | Microsoft 365 admin center | Sizes the license counts and the opportunities to your company. |
| Copilot seats | Microsoft 365 admin center | How many you've bought, and how many are in use. The gap is unused value. |
| MFA coverage | Microsoft Entra admin center | The share of your users with multifactor authentication, as a percentage. |
Where to find it
How to get your Secure Score.
Microsoft renames menus from time to time, so the names you see may differ slightly. If you get stuck, tell us in your reply and send the three numbers anyway.
- Sign in to the Microsoft Defender portal at security.microsoft.com with an account that can view Secure Score, such as a Global Reader or Security Reader.
- Open the Secure score page and note your current score, shown as a percentage.
- Open its Recommended actions tab. If your tenant offers an export, save the list as a file. If not, take screenshots of the list sorted by score impact; the top 20 actions are enough.
On Google Workspace
Three numbers instead.
Google Workspace has no Secure Score, so that part of your Scorecard is marked not measured, never missing. Send these three numbers from your Google Admin console if you have them; any you can't find, leave out.
2-Step Verification
The share of your users enrolled, as a percentage.
Licensed users
How many people have a Google Workspace license.
Gemini
How many people have Gemini, and how many use it.
How to send it
Reply to the email thread from TNT.
Attach the export or your screenshots and type the three numbers in your message. Replying keeps everything with your Scorecard request.
Haven't asked for your Scorecard yet?
Send the form first. A person replies within one business day. Reply to that email with your export.
Get your free ScorecardCan't find the thread?
Write to info@tnttech.io from the address you used on the form.
What we never ask for
No passwords, no mail, no documents.
This step needs no access to your systems. We never ask you to send:
Passwords
Or sign-in codes and recovery keys.
Mail, documents or chats
No mailboxes, no files from SharePoint, OneDrive or Google Drive, and no Teams or Google Chat messages.
Patient or customer records
Nothing about the people you serve.
Please don't include patient records, client files, account numbers or passwords. A review inside your systems, with read-only access you grant, is part of the paid Assessment, never the free Scorecard.
What happens to it
The files are deleted. The figures stay with your request.
Your export and your numbers are used for your Scorecard and, if you book a call, to prepare for it. A person types the figures from them onto your Scorecard request, and we work from those figures, not your files. The files you send are deleted within 30 days of sending your Scorecard. The figures and your Scorecard are kept with your request, up to 24 months after our last contact with you.