ShareScout - Find what's overshared in Microsoft 365 before Copilot does

M365 Scouts here. We built ShareScout, and this is a vendor account, so weigh it accordingly. It exists because Copilot surfaces whatever a user can already open, and most tenants have no list of what that is. Microsoft's own Data access governance reports answer the question, but they need SharePoint Advanced Management. You get that once at least one Copilot licence is assigned, as a paid add-on, or with Microsoft 365 E7. E5 without Copilot gets 28-day activity reports capped at 10,000 sites, with no snapshot and no remediation. Business plans get nothing. (Sources: learn.microsoft.com/sharepoint/data-access-governance-reports and learn.microsoft.com/sharepoint/sharepoint-advanced-management-prerequisites) ShareScout is the version you can run today on any plan: - Lite is free and open source (MIT, github.com/ugursayar/sharescout-lite): a tenant summary in the console, a CSV of every Anyone link with its expiry, and a CSV of every site open to the whole company. - Solo ($79, one-time) adds the HTML report: per-site Copilot exposure score, stale guests, broken inheritance, ownership, sensitivity-label gaps, every finding as CSV. - Pro ($199, one-time) is for consultants and MSPs: unlimited client tenants and your name on the report. It is a script, not a SaaS. Nothing is uploaded; the report is written to your machine. On permissions, plainly: the Graph scopes are read-only, and the SharePoint sign-in asks for the delegated AllSites.FullControl scope, because the tenant-admin cmdlets that list every site fail with AllSites.Read. The script only reads, and the Lite source is public so you can check that. Happy to answer anything about the scoring, the scopes, or what SharePoint Advanced Management does and does not give you.