Features - SPScan

Permission Monitoring

Automatic discovery and change detection

SPScan continuously scans site-level and item-level permissions across every connected SharePoint tenant, building a complete picture of who has access to what and how that access changes over time.

Site & item-level scanning

Full permission discovery at every level of your SharePoint hierarchy, from sites down to individual files.

External sharing detection

Automatically discover external sharing links across your entire tenant. Know who has shared what outside your organisation.

Anonymous link identification

Find anonymous access links that expose content without authentication. Prioritise the highest-risk shares first.

Permission inheritance tracking

Track which sites and items inherit permissions and which have unique permissions applied. Detect broken inheritance.

Overpermissioned site detection

Sites with more than 50 unique permissions are flagged automatically. Identify permission sprawl before it becomes a security risk.

Historical snapshots

Every scan stores a timestamped permission snapshot. Compare any two points in time to understand exactly what changed and when.

Storage Analytics

Deep visibility into storage consumption

Recursive folder scanning surfaces exactly where storage is being consumed. Detect version bloat, monitor growth trends, and get alerted before quotas are exceeded.

Per-site breakdown

Per-site and per-library storage breakdown showing exactly where capacity is being consumed across your tenant.

Recursive folder scanning

Full folder hierarchy with size tracking at every level. Drill down to find the biggest storage consumers.

Version bloat detection

Identify files with excessive version history consuming storage. Find the biggest offenders across all document libraries.

Storage threshold alerts

Configurable capacity percentage alerts. Get notified when sites approach their quota limits.

Storage spike detection

Automatic alerts when storage usage grows more than 20% between scans. Catch unexpected consumption early.

Historical trending

Storage snapshots over time let you track growth trends, forecast capacity needs, and identify patterns.

Alerting

Alerts delivered where your team works

Configure granular alert rules per tenant or globally. Choose your delivery channels and get notified the moment something changes in your SharePoint environment.

Delivery Channels

Email

HTML-formatted alerts with full event details. Included on all plans.

Slack

Rich messages posted to your chosen channel with actionable details.

Microsoft Teams

MessageCard notifications in your Teams channels for instant visibility.

Webhooks

JSON POST to your endpoint for custom integrations and automation workflows.

9 Alert Events

New External Share

Anonymous Link Detected

Permission Change

Storage Threshold

Storage Spike

New Site Discovered

Token Expired

Scan Failed

Overpermissioned Site

Compliance & Reporting

Automated compliance scoring and audit reports

Every tenant receives an automated compliance score from 0 to 100, calculated from external shares, anonymous links, and permission hygiene. Export detailed reports for audits and stakeholder reviews.

Compliance score (0-100)

Automated per-tenant score based on external shares, anonymous links, and permission configuration.

CSV & PDF exports

Export permission reports, storage analytics, and compliance scores for client reporting or audit trails.

Azure AD group resolution

See exactly who has access by resolving group memberships. Expand nested groups to individual users.

Team-scoped multi-tenancy

Role-based access with Jetstream team management. Invite colleagues, assign roles, and scope data per team.

And everything else you'd expect

Built on proven infrastructure shared across our monitoring platform, so you get enterprise-grade reliability from day one.

REST API

Full Sanctum-authenticated API for automation. Query tenants, permissions, storage data, and trigger syncs programmatically.

Microsoft OAuth

One-click connection via Microsoft 365 OAuth. Multi-tenant authority support means any Microsoft 365 organisation can connect.

Rate-limit handling

Automatic 429 handling with exponential backoff and Retry-After header support. Your scans complete reliably every time.

Guided onboarding

4-step wizard walks you through setup: subscribe, connect your tenant, configure alerts, and start monitoring.

365-day history

Full year of permission and storage snapshots. Compare any two points in time to understand exactly what changed and when.

Teams & collaboration