Sabiki launches free AI readiness scan for Microsoft 365

Sabiki Security has launched a free AI Readiness Scan and auto-remediation tool for Microsoft 365 tenants. Data from 178 scanned tenants, the company says, shows widespread gaps in how organisations oversee AI-related identities.

The Singapore-based security company says a default Microsoft 365 tenant fails its benchmark for AI readiness. The benchmark combines Microsoft Secure Score recommendations with the CIS Microsoft 365 Foundations Benchmark and the NIST AI Risk Management Framework.

Across the 178 tenants scanned since the tool launched, Sabiki says 97% contained AI agent identities that had not been reviewed. It also found that 74% had no sensitivity labels or data loss prevention policies in place, 53% had external or anonymous sharing settings that could expose data through AI assistants, and 37% allowed users to grant apps access to company data without administrator approval.

The dataset also showed that 38% of tenants had known rogue non-human identities active in the environment. Sabiki says these identities were apps and service principals matching incident-response lists of applications documented as abused by threat actors in Microsoft 365 compromises, although it added that a match alone did not mean a tenant had been compromised.

In 8% of scans, Sabiki found what it described as agentic identities changing their own permission scopes without a human session involved. It identified those cases through Microsoft 365 audit records in which the identity whose permissions changed was also the identity that made the change.

"Nearly one in ten scans showed an AI agent expanding its own access with no human in the loop," said Mark Anderson, product manager at Sabiki Security.

"That's not a misconfiguration. That's the exact scenario every AI governance framework warns about, and it's happening in production tenants today," Anderson said.

The identity gap

Sabiki argues that many existing AI security tools focus on user activity, endpoint behaviour, browser controls or network traffic, while missing how AI systems operate inside Microsoft 365. In these environments, the company says, AI functions through identities such as app registrations, service principals and autonomous agents that act directly inside the cloud tenant.

"There are so many great solutions out there looking at user behaviour and DLP from an endpoint or proxy perspective," Anderson said. "But people are missing one big factor in how AI exists in environments of every size: its identity. What that identity can do, what it actually does, and whether it's being driven by a person or driving itself. An agent working tenant-to-tenant through the Microsoft Graph never touches the endpoint and never crosses the proxy. It can completely bypass an endpoint security agent or a CASB. If you're not watching the identity, you're not watching the AI."

According to Sabiki, the AI Readiness Scan runs more than 100 checks across tenant security, sharing settings, data security posture and the agentic identities present in a Microsoft 365 environment. Users receive the full report without gated access and can apply one-click remediation for settings the company considers safe to change automatically.

Market focus

The product is aimed at managed security service providers and mid-market organisations using Microsoft 365, particularly tenants running on E3 or Business Premium licences. Sabiki says its wider AIRM platform is designed to provide continuous monitoring and governance for non-human identities across a tenant after the point-in-time scan is completed.

AIRM tracks what agentic identities do inside an environment, including what data they access, who is driving them and when they act autonomously. It also lets service providers and IT teams set access control policies for agent identities.

Sabiki says AIRM connects directly to the Microsoft 365 tenant without software installed on endpoints or traffic routed through a proxy. That approach is intended to reduce deployment complexity for managed service providers and internal IT teams.

Anderson said the free scan reflects frustration with the cost and focus of some existing assessments in the market. "We keep running into customers and MSSPs paying top dollar for tools that miss half of what matters," he said. "An assessment like this is routinely quoted in the thousands of dollars or more, and it still comes back focused on file sharing. We're giving it away, with the fixes, because every MSSP should be able to answer, 'is my client ready for AI?' properly. And yes, it's an on-ramp. The scan shows you the doors that are open. AIRM watches who walks through them. If that shakes up how this market prices itself, good."

On its positioning against larger identity vendors, Anderson said: "We're not trying to compete with the big enterprise identity platforms that take months to deploy and carry a six-figure price tag. We built AIRM for MSSPs and the mid-market. If you're on E3 or Business Premium and working out your AI roadmap, you should be talking to us or one of our partners."