Questions and answers
Straight answers before you start.
Can't find your question? Ask us and we will answer within one working day.
What does ExposurePoint do?
It is a web part a site owner adds to one SharePoint site. It checks who can open what on that site, gives a score from 0 to 100 in plain English, names every file, link and person behind each issue, and fixes them after you confirm.
Does it make my site secure?
No tool can promise that, and ExposurePoint does not try. It shows how exposed one site is to Microsoft 365 Copilot and helps you lower that exposure. A higher score means lower exposure, nothing more.
Does it check our whole tenant?
No. It checks the site it is placed on, with the permissions of the person using it. To assess and govern every site in your tenant, see GovernPoint, our tenant-wide product.
Can it find sensitive information in our documents?
No. It can see whether a sensitivity label has been applied to the site. Judging whether content is sensitive needs Microsoft Purview.
Does anything leave our Microsoft 365 tenant?
Your content, findings and scores never do. Once a day the app tells Apps 365 your tenant ID, the site address, the app version and the licence state, so we can support your licence. A site owner can switch that off in the web part settings, and licence checks work the same without it.
Does it need admin consent or Microsoft Graph permissions?
No. Everything runs through SharePoint in the signed-in person's own context, so there is no API permission to approve. A SharePoint administrator uploads the app to your app catalog once; after that any site owner can add it to a page.
Will it change anything without asking?
No. It changes nothing until someone confirms a fix, and every confirmation lists what will change and who will lose access. Fixes are only offered to people who can manage permissions on the site.
Can a fix make things worse?
ExposurePoint is built so it cannot widen access. Removing a link, a guest or whole-organisation access only takes access away. It only offers to restore a file's permissions when that removes extra people; files locked down tighter than the site are never touched.
How is the score worked out?
Each of eight risks takes points off 100, more for the first occurrence and less for each after, up to a cap. When risks overlap, another 10 points come off, or 20 for the combinations Microsoft names as high risk. The weights are on the What it checks page.
What can I see without a licence?
The score and the kinds of issues on the site, free. A licence or a 30-day trial shows exactly which files, links and people are involved, fixes them, keeps the history and creates the report.
How is it licensed?
One plan, priced by how much it covers: one site, one site collection or the whole tenant, by the year. Licence keys come from Apps 365 and are checked on your device; there is no licence server for the app to call.
How do I buy a licence?
Choose a level on the pricing page and check out in the APPS 365 shop at apps365ltd.com. After payment you paste your SharePoint address and your key appears straight away, by email too. Licences renew each year with a new key until you cancel. For a quote, invoice or purchase order, contact us.
Where is the score history kept?
In a hidden list on your own site, written automatically at most once a day. Hidden means out of the site navigation; it is not a security boundary.