// tenant-scan · microsoft graph · read-only

Every SharePoint site your firm has ever created, on one timeline.

Dormant projects, ownerless archives, "Test Site — DO NOT USE" from 2021: they hold your data, your storage bill, and your audit risk. The scanner reads activity and usage through Microsoft Graph and scores every site, worst first, with the reason spelled out.

delegated Sites.Read.All + Reports.Read.All · nothing written, ever · revocable by you

What a scan surfaces

Numbers from the sample report (fictional 24-site tenant):

7 / 24
sites flagged prune-candidates
5
sites with no owner at all
6.0 GB
immediately reclaimable storage
1,775
days since the oldest "active" site was touched
How is this different from SharePoint Advanced Management? It isn't trying to replace it — SAM's inactive-site policies are good, if you licence them per-user. The scan is a one-shot, licence-free snapshot with a human review on top: what to keep, archive, or delete, and what it says about how your firm actually uses Microsoft 365. Many firms use the scan to decide whether SAM is even worth buying.

Why it's free

Cairn Labs is the product arm of Cairn Automation, an automation practice for professional-services firms. The scan report is the best first conversation we've found: it's concrete, it's about your tenant, and it's useful even if you never speak to us again. Firms that want the findings fixed — archiving, restructuring, governance automation — become clients. That trade is the price.

For consultants & MSPs

The scanner is a TypeScript CLI: device-code auth, read-only Graph calls, HTML report out. If you'd want to run the same free-scan wedge with your own clients under your own brand, register interest — if enough firms ask, we'll productise a consultant licence.

Register consultant interest

Twenty minutes. Read-only. Yours to keep.

Book the free scan through Cairn Automation — you watch the access grant happen in your own admin centre.

Book a free tenant scan