Cybersecurity Rating
by ImmuniWeb® CyberScore™

Get a free cybersecurity, privacy and AI security rating of your company, partners or suppliers
Free online tool with PDF report
  • Website Security Rating
  • Website Privacy Rating
  • Encryption Security Rating
  • Email Security Rating
  • GenAI Exposure Rating
  • Dark Web Exposure
Free online tool with PDF report
63,079 organizations tested
|Provided "as is" without any warranty of any kind
21
tests
running
667
tests
in 24 hours
tests in 24 hours

Error:

Share this report:

Cybersecurity Rating of microsoft.com

Website
Security Rating: B+
Website
Privacy Rating: A
SSL
Security Rating: A
Email
Security Rating: A
GenAI
Exposure Rating: A+
Tested on November 7th, 2026 23:23 GMT+0
Website Security:Tests Finished
Website Privacy:Tests Finished
SSL Security:Tests Finished
Email Security:Test Finished
GenAI Exposure:Test Finished

Website Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
www.microsoft.comhttps://www.microsoft.com/CNovember 7th, 2026 23:30
assets-bundle.clouddamppe.microsoft.comhttps://assets-bundle.clouddamppe.microsoft.com/CNovember 7th, 2026 23:40
teams.microsoft.comhttps://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=5e3ce6c0-2b1f-4285-8d4b-75ee78787346&scope=openId%20profile%20openid%20offline_access&redirect_uri=https%3A%2F%2Fteams.microsoft.com%2Fv2%2Fauthv2&client-request-id=01a1b861-3130-79d1-86af-14b74b5878eb&response_mode=fragment&client_info=1&clidata=1&nonce=01a1b861-3131-77ba-8ec5-b6f061bd8127&state=eyJpZCI6IjAxYTFiODYxLTMxMzEtNzhhNS04NjU1LTE3Y2VlOTQyODkyYyIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D%7Chttps%3A%2F%2Fteams.microsoft.com%2Fv2%2F%3Fenablemcasfort21%3Dtrue&x-client-SKU=msal.js.browser&x-client-VER=5.6.3&response_type=code&code_challenge=zCuX-jkDk-aNBaGDTIrOHOmfZkXaEc5O1QH_Tk0UO84&code_challenge_method=S256ANovember 7th, 2026 23:40
dotnet.microsoft.comhttps://dotnet.microsoft.com/en-us/ANovember 7th, 2026 23:41
apps.microsoft.comhttps://apps.microsoft.com/home?hl=en-US&gl=CAANovember 7th, 2026 23:43
Show 17 More

Website Privacy Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLGradeTested on
microsoft.comhttps://www.microsoft.com/en-ca/A-November 8th, 2026 00:40
www.microsoft.comhttps://www.microsoft.com/en-ca/B-November 8th, 2026 00:40
assets-bundle.clouddamppe.microsoft.comhttps://assets-bundle.clouddamppe.microsoft.com/ANovember 8th, 2026 00:40
teams.microsoft.comhttps://teams.microsoft.com/v2/B+November 8th, 2026 00:40
dotnet.microsoft.comhttps://dotnet.microsoft.com/en-us/ANovember 8th, 2026 00:40
ImmuniWeb DiscoveryFull visibility of your vulnerable IT assets
with ImmuniWeb® Discovery
Show 17 More

SSL Security Rating | Overview

Back to Top

The total number of subdomains is capped at 50.

HostnameURLProtocolGradeTested on
microsoft.comhttps://microsoft.com
150.171.110.20:443		HTTPSA+November 7th, 2026 23:25
www.microsoft.comhttps://www.microsoft.com
23.192.53.222:443		HTTPSA-November 7th, 2026 23:25
assets-bundle.clouddamppe.microsoft.comhttps://assets-bundle.clouddamppe.microsoft.com
20.119.136.5:443		HTTPSA-November 7th, 2026 23:40
teams.microsoft.comhttps://teams.microsoft.com
52.123.251.190:443		HTTPSNNovember 7th, 2026 23:39
dotnet.microsoft.comhttps://dotnet.microsoft.com
13.107.246.36:443		HTTPSA+November 7th, 2026 23:40
Show 17 More

Email Security Rating | Overview

Back to Top
HostnameGradeTested on
microsoft.comANovember 7th, 2026 23:26
  • Email Server Security Report
    A total of 4 email servers were analyzed. Open relay was not detected, SMTP enumeration was not detected, a secure authentication was enforced across all tested servers, and PTR records were properly configured. The average response latency was approximately 0.065s.
  • Email SSL/TLS Encryption Report
    SSL/TLS security testing was completed for 4 email servers. Server grade is B+.
  • Email Server DNS Security Report
    SPF is set properly, DKIM is set properly, and DMARC is set properly. MTA-STS is configured but has issues. A and MX DNS records are unsigned.
  • Email Server Black and Spam Lists Report
    No email servers were found on blacklists.
ImmuniWeb DiscoveryFull visibility of your vulnerable IT assets
with ImmuniWeb® Discovery

GenAI Exposure Rating

Back to Top
  • No vibe-coded or AI-created code patterns detected across 21 websites.
  • No leaks of AI tokens or other AI-related and sensitive data detected on the Dark Web.
  • No leaks of AI tokens or other AI-related and sensitive data detected across 22 websites.

Dark Web and Threat Exposure Rating | Overview

Back to Top
HostnameTested on
microsoft.comNovember 7th, 2026 23:23
  • Dark Web Exposure Report
    A total of 43 dark web incidents detected, containing 482 mentions of the domain. 36 out of 43 incidents originate from Pastebins. Out of all detected Compromised Credentials, 12 are considered to be of Medium risk and 30 of Low risk. None are categorized to be of Critical or High risk. Mentions in Pastebins represent the most common source of compromised information, accounting for 332 of the 482 detected domain mentions on the Dark Web.
  • Unprotected Cloud Storage Report
    A total of 3 buckets detected across 2 cloud storage providers, including 1 public bucket and containing 4 publicly accessible files: 1 bucket was detected in Amazon S3; 2 buckets were detected in Google Cloud Storage, including 1 public bucket and containing 4 publicly accessible files.
  • Phishing Websites Report
    No potential phishing websites found.
  • Cybersquatting Domains Report
    755 potential cybersquatting domains detected. Example domains: mirrosoft.com, microsoftn.com and dotnetmicrosoft.com; additional cybersquatting domains are available in the detailed report.
  • Typosquatting Domains Report
    59 potential typosquatting domains detected. Example domains: mifrosoft.com, mivcrosoft.com and micrrosofft.com; additional typosquatting domains are available in the detailed report.
  • Fake Accounts in Social Media Report
    1089 squatted social network accounts detected across 8 social networks. Most affected social networks include Blogspot with 317 accounts including microsoftaccessvba.blogspot.com and microsoft-word.blogspot.com, Facebook with 171 accounts including @microsoft2000 and @microsoft.2000 and WordPress with 154 accounts including microsoftweblog.wordpress.com and microsoftshop.wordpress.com; the full list is available in the detailed report.
ImmuniWeb DiscoveryFull visibility of your stolen data
with ImmuniWeb® Discovery
Share this report:

Upgrade to ImmuniWeb® AI Platform

Take Your Security Ratings to the Next Level
Continuous Threat Exposure Management
Continuous Threat
Exposure Management
with ImmuniWeb® Discovery
Web Application Penetration Testing
Web Application
Penetration Testing
with ImmuniWeb® On-Demand
Continuous Web Scanning and Penetration Testing
Continuous Web Scanning
and Penetration Testing
with ImmuniWeb® Continuous
FREE DEMO
Corporate Datasheet [PDF]