How exposed is your Entra ID app layer? Get your free AppGov Score.
The free AppGov Score benchmarks your Entra tenant across 20+ application governance checks and shows how many apps are affected by each, so you can size your exposure.
Read-only scan. We never change anything in your tenant. No credit card. Revoke access anytime.
See the exact read-only permissions we request
SOC2 Type 2 | Microsoft Partner | Trusted in over 130 countries since 2004.
What your free AppGov Score shows:
You get an overall score plus a count of how many apps are affected by each of 20+ security and governance checks across App Registrations, Enterprise Apps, Hunting Analysis, and Tenant Settings, including how many apps are:
- High-risk apps
- Using public client flows
- Missing an assigned owner
- Overprivileged and BEC-risky apps
- Carrying expired/expiring credentials (secrets and certificates)
- Missing admin consent
- Accounts with elevated app permissions
- Plus your benchmarked score across 20+ checks
Each check comes with an expert explanation of why it matters. Don't wait for a breach to identify and close gaps in your application governance.
From sign-in to score in about 10 minutes
1. Sign in with your Microsoft account and grant read-only consent.
2. AppGov Score scans your Entra ID tenant. Most tenants finish in about 10 minutes.
3. Get your AppGov Score and prioritized report.
4. Optional: Start a 7-day free trial of App Governance Accelerator to go deeper
Why AppGov Score beats native tooling
|
Feature |
AppGov Score |
Microsoft Built-ins |
|
Real-world governance risk scoring |
✅ Yes |
❌ No |
|
Tenant-wide Entra ID app scan |
✅ Yes |
⚠️ Limited |
|
Expert Explanations and community access |
✅ Yes |
❌ No |
|
Free to use |
✅ Yes |
✅ Some tools |
Built for the people who own app risk:
M365 leaders, identity admins, security engineers, and Entra ID owners tired of the black box of app security.
Backed by the community. Trusted by MVPs.
Managing the volume of Entra ID Apps is very challenging. The native Microsoft tools do not make it easy to understand how big the problem is in a tenant. Misconfigured and overprivileged apps are a huge problem and are now being exploited by adversaries. It's awesome ENow has tackled this problem head on.
Sander Berkouwer, 17x Microsoft MVP Security
Application Governance is a crucial aspect of Zero Trust, as it ensures that your applications are secure and compliant. With App Governance Accelerator, I can monitor my Application Governance using a simple and intuitive score card. The application will help me achieve our application governance goals with ease and confidence.
Matthew Levy, 7x Microsoft Security MVP
Learn more about AppGov Score in Petri's UnplugIT podcast and Merill Fernando's Entra.Chat podcast
Start free. No strings attached.
- Free scan and report
- No credit card required
- Read-only, revoke anytime
- Community access and resources
Frequently Asked Questions
What Permissions Are Required?
- To get your AppGov report, somebody with Entra ID (formerly Azure AD) will need to consent.
- The application will require the following read only permissions:
Permission Name Description Directory.Read.All Read directory data. EntitlementManagement.Read.All Read all entitlement management resources. Policy.Read.All Read your organization's policies. Policy.Read.PermissionGrant Read consent and permission grant policies. RoleManagement.Read.All RoleManagement.Read.All
How Long Does It Take To Get My Report?
- For organizations with under 2,000 apps, it take approximately 5 minutes. For larger organizations it can take up to an hour. You can be notified via text or email when the report is ready.
- You can also bookmark the page and come back to it in about 20 minutes. This is recommended if the email address you signed up with is not mail-enabled.
Who decides what the AppGov Score consists of?
- The AppGov Score methodology was created following Microsoft's recommended practices for Application Security & Governance and is governed by several long-time Microsoft Security & Identity MVPs. If you have feedback, please post in our community forum or contact us.
Is the AppGov Score tool really free?
Yes, it is free. No payment or credit card information is required to obtain your AppGov Score and assessment report. ENow is grateful for all we've learned through the IT and Microsoft community over the years. We created this free tool and free blog and forum resources to give back and help out our fellow IT Pro! We truly believe that we're in this and stronger together.
If you're looking for expanded capabilities, there are paid versions available (Standard, Professional, and Enterprise).
Not the admin, or need help?
Send this page to whoever grants consent in your Entra ID, or reach us at info@appgovscore.com. You can also ask peers and Microsoft MVPs questions in the AppGov Score community forum.
