Old links keep working
A link made for one meeting two years ago still opens the file today, for anyone who has it.
For SharePoint site owners
See what Copilot can see. Fix what matters first.
ExposurePoint checks one SharePoint site and tells you, in plain English, how exposed it is to Microsoft 365 Copilot. It names every Anyone link, organisation link, guest and wide-open file, and fixes them after you confirm.
- Free score, no card
- No admin consent
- Runs inside your tenant
From Apps 365, the UK team behind GovernPoint and Handover Pro for SharePoint.
The problem
Copilot only shows people what they can already open. So who can open what?
Microsoft is clear that Copilot respects permissions. That makes every forgotten link and every site open to the whole organisation part of what Copilot can draw on, for everyone those permissions reach.
Whole-organisation access hides in groups
Public teams quietly give "Everyone except external users" a seat in the members group.
Owners rarely see the full picture
Sharing is checked one file at a time, and the reviews Microsoft offers are started by an administrator.
Microsoft: Microsoft 365 Copilot only uses organisational data that each person already has at least view access to. Microsoft Learn
Before and after
From "I think it's fine" to a number you can improve.
Without ExposurePoint
- Links checked one file at a time, if at all
- Whole-organisation access nobody remembers adding
- Guests from finished projects still on the site
- Waiting for IT to run a review
- No way to show the site is getting better
With ExposurePoint
- Every link on the site in one list, by name
- Whole-organisation access found wherever it is granted
- Guests listed and removed in one confirmed step
- The site owner checks it live, today
- A score with history, and a report for IT
What it checks
Eight risks Microsoft names for Copilot, scored like Microsoft would rank them.
The model follows Microsoft's own SharePoint guidance for getting ready for Copilot, including its rule that overlapping risks are worse than either alone.
Anyone links
Links that open a file or folder without signing in. They are easy to forward and you cannot see who has them.
Open to everyone in your organisation
"Everyone except external users" or "Everyone" on the site, inside its groups, on a library or on a file. Common on public teams.
Links for anyone in your organisation
Links any colleague can use. Everyone who opens one keeps access, so Copilot can bring the file into their answers.
External guests
People outside your organisation with accounts in the site collection, who may still reach content they no longer need.
Files and folders open wider than the site
Items with their own permissions that let in people who cannot see the rest of the site. Items locked down tighter are left alone.
No owner
Nobody is responsible for who can see the site, so access grows and is rarely reviewed.
Site looks inactive
Nothing has changed for a long time (90 days by default). Old content can still turn up in Copilot answers.
No sensitivity label applied
The site has no sensitivity label. ExposurePoint can see that a label is missing; it cannot tell whether the content itself is sensitive.
See it in action
Four screens from score to sorted.
Drawn from the real app on a made-up Finance site.
The score
One number, one band, and what fixing would do.
A score from 0 to 100, where higher means lower exposure, and the risks ranked highest first. Every finding shows how many points it is worth, and the top line says what the score would be after the fixes ExposurePoint can make.
- Plain English, written for site owners
- Says so when a check could not complete
- The score is free, even without a licence
The details
Every file, folder, link and person, by name.
Open any finding to see exactly what is behind it: which file, in which folder, and what the link lets people do. Open the item straight from the list to review it in SharePoint.
- Anyone and organisation links across every library
- Whole-organisation access on the site, groups, libraries and files
- Files open wider than the site, with the extra people named
The fix
Fixed here, after a confirmation that names who loses access.
Tick what to fix and confirm. ExposurePoint removes links, guests or whole-organisation access, or gives a file the site's permissions again, then checks the site once more to prove it worked.
- Only offered to people who can manage the site
- Never widens access: locked-down files are left alone
- Anything that could not be fixed is listed
History and report
Show the work, and hand IT the rest.
The score is saved to a hidden list on your site once a day, so the trend builds by itself. Download a report with every finding and what to do, to keep or send to IT.
- History stays in your site, not with us
- The report prints cleanly to PDF
- Uses the same terms as Microsoft's site reviews
How it works
Running on your site in the time it takes to add a web part.
Straight answers
What ExposurePoint will never claim.
A score you can trust has to be honest about its limits. These are built into the product, not just the small print.
- It checks one site, not your tenant. For every site at once, see GovernPoint.
- It cannot tell whether content is sensitive. It sees whether a sensitivity label is applied; judging content needs Microsoft Purview.
- It never calls a site safe. Scores mean lower or higher exposure, nothing more.
- It says when it could not see everything. If a check is blocked or a site is very large, the result says real exposure may be higher.
Pricing
The score is free. Fixes start at £149 a year.
One plan, priced by how much it covers. Every plan includes everything, and every site gets a free 30-day trial.
Site
£149 a year
One SharePoint site
Site collection
£399 a year
One site collection and every site inside it
Tenant
£1,499 a year
Every site in your Microsoft 365 organisation
Prices exclude VAT. Compare levels
Questions
What people ask first.
Does it make my site secure?
No tool can promise that, and ExposurePoint does not try. It shows how exposed one site is to Microsoft 365 Copilot and helps you lower that exposure. A higher score means lower exposure, nothing more.
Does it check our whole tenant?
No. It checks the site it is placed on, with the permissions of the person using it. To assess and govern every site in your tenant, see GovernPoint, our tenant-wide product.
Can it find sensitive information in our documents?
No. It can see whether a sensitivity label has been applied to the site. Judging whether content is sensitive needs Microsoft Purview.
Does anything leave our Microsoft 365 tenant?
Your content, findings and scores never do. Once a day the app tells Apps 365 your tenant ID, the site address, the app version and the licence state, so we can support your licence. A site owner can switch that off in the web part settings, and licence checks work the same without it.