Security
Designed for security-sensitive tenants.
Audit Hammer minimizes collection, performs read-only assessment operations and separates local identity correlation from assessment evidence.
READ-ONLYNo tenant configuration changes.
MINIMIZEDNo mail, SharePoint or OneDrive business content.
PSEUDONYMIZEDIdentity evidence is pseudonymized by default.
CAPABILITY-AWAREUnavailable capabilities are not automatic failures.
Microsoft Graph permissions
The current collector uses delegated read permissions:
Organization.Read.AllLicenseAssignment.Read.AllUser.Read.AllRoleManagement.Read.DirectoryPolicy.Read.AllPolicy.Read.AuthenticationMethodUserAuthenticationMethod.Read.AllEvidence handling
Identity evidence is pseudonymized by default for analysis. A separate local identity correlation file may contain original identifiers and is intended to remain local to the assessment operator.
Security disclosure
If you believe you have identified a security issue, contact security@audithammer.com.