Skip to main content

Understanding the Integrity Score

What the Integrity Score measures, how to read your result, and what actions move the needle across your Microsoft 365 environment.

Written by BindTuning Team
Updated this week

The Integrity Score is a single number, from 0 to 100, that reflects the overall integrity of your Microsoft 365 tenant. It is calculated based on signals collected across your workspaces. The higher the score, the healthier and better-governed your environment.

The score is not limited to measuring performance or usage. It measures integrity — how structurally sound, secure, well-governed, and adopted your workspaces are at any given point in time.


Score bands

Your score falls into one of four bands, each reflecting a different state of governance health.

Score

Status

Definition

80-100

Elite — Exceptional

Your workspace is secure, governed, and operating at the highest standard. Your M365 environment represents best-in-class hygiene. Security controls are tight, governance is enforced, access is managed, and users are engaged. You set the benchmark for what good looks like.

60-79

Good — Solid

Your workspace is healthy with clear opportunities to strengthen governance and security. Solid foundations exist but inconsistent enforcement or incomplete coverage means some workspaces operate outside your standards. A focused remediation effort could push you to Elite.

40-59

Fair — Needs Work

Your workspace has significant governance gaps creating measurable security and compliance exposure. Oversharing is likely occurring, ownership gaps leave workspaces unmanaged, and sprawl is consuming resources. Without intervention, these issues compound over time.

0-39

Poor — Critical

Your workspace is in a critical state with serious security, compliance, and governance failures requiring immediate action. The environment is operating without adequate governance and is highly exposed to security incidents and data leaks. Immediate intervention is required.


What affects your score

The Integrity Score is calculated across the governance domains that Pulse365 monitors. Each domain contributes to the overall result, and weaknesses in any area will pull the score down.

Ownership and membership

Workspaces without valid, active owners are one of the strongest negative signals. Orphaned workspaces cannot be governed, archived, or audited effectively. Every workspace missing a responsible owner reduces your score.

Lifecycle and activity

Inactive workspaces that have not been reviewed, archived, or deleted accumulate over time and signal a lack of lifecycle governance. High volumes of stale workspaces lower the score regardless of their content.

Permissions and external access

Oversharing, anonymous sharing links, unredeemed guest invitations, and external users with access to inactive workspaces all represent uncontrolled exposure. Each unresolved sharing risk contributes negatively.

Privacy and compliance coverage

Workspaces operating without sensitivity labels or retention policies are unclassified and unprotected. Low coverage across these compliance controls is reflected directly in the score.


Improving your score

Score improvements come from addressing real adoption and governance gaps — not from configuration changes. The most effective actions span all three dimensions of Workspace Integrity.

Fix and monitor with Pulse365

Pulse365 is where you identify what is pulling your score down and take corrective action. Assigning owners to orphaned workspaces, archiving inactive sites, cleaning up sharing links, and reviewing external access are all actions that directly raise your score. Pulse365 surfaces these issues by domain so you can prioritize the highest-impact fixes first.

To learn more, read Understanding Pulse365.

Prevent future drift with Automate365

Fixing existing issues raises your score today, but new workspaces created without governance will erode it again over time. Automate365 addresses this at the source — by ensuring every new workspace is provisioned with an owner, a naming policy, the right sensitivity label, and a lifecycle policy already in place. Prevention is always more efficient than remediation.

To learn more, read Understanding Automate365.

Drive engagement with Intranet

Employee engagement is part of what a healthy M365 environment looks like. Low adoption signals that workspaces are not being actively used or maintained. A well-structured, accessible intranet encourages consistent engagement and keeps content ownership active — contributing to the overall integrity of the environment.

To learn more, read Understanding Intranet.


Recommendations

Your Integrity Score surfaces a prioritized set of recommendations based on the specific tenant gaps. These recommendations point to the highest-impact actions you can take — organized by domain and severity — so you always know what to address first.

For a detailed walkthrough of how recommendations work and how to act on them, read the dedicated article on Pulse365 Recommendations.


Your Integrity Score updates as your tenant changes. Corrective actions are reflected in the next rescan, giving you a clear feedback loop between the work you do and the health of your environment.

Did this answer your question?