Read-only PowerShell + Graph audit of SharePoint, OneDrive and Teams sharing: Anyone links, sites open to every employee, stale guests, broken inheritance, ownerless sites, missing labels, with a per-site Copilot exposure score. Runs in your tenant. Nothing leaves it. The Lite tier is free and open source (MIT).