Is Microsoft safe?
Review Microsoft security risks.

Nudge Security provides security profiles for thousands of SaaS apps, including Microsoft. This public profile has the basics you’ll need for a vendor risk assessment. For more details on Microsoft, including breach history, start a free trial of Nudge Security.
Microsoft Security Profile

CATEGORY

Collaboration

Organization Details

What is

Microsoft

?

Microsoft is a technology company that produces software, services, and devices. Microsoft products and services include Surface, Microsoft 365, Xbox, Windows, Azure, and more.

HEADQUARTERS

HOSTING

HOSTING LOCATION

Who's Using Microsoft in your org?

Nudge Security discovers every user for every SaaS app within minutes of starting a free trial.

Learn more

Security Program

SECURITY CERTIFICATIONS

SOC2 Compliance
PCI Compliant
HIPAA Compliant
SOC2 Compliance
SOC 2 Compliant
GDPR Compliant
ISO 27001 Compliant
FedRamp Compliant
CSA Star Level 1
Compliant

SECURITY PORTAL

BUG BOUNTY

VULNERABILITY DISCLOSURE

STATUS PAGE

SUBDOMAINS

  • forms.microsoft.com
  • blog.flow.microsoft.com
  • web.vortex.data.microsoft.com
  • ro.dhs.ops.microsoft.com
  • 13.tlu.dl.delivery.mp.microsoft.com
  • surveyplatform.microsoft.com
  • mtq.microsoft.com
  • community.microsoft.com
  • skype.fraud.microsoft.com
  • appsource.microsoft.com
  • qe.fasttrack.microsoft.com
  • keydelivery.one.microsoft.com
  • v10.events.data.microsoft.com
  • datamigration.microsoft.com
  • emea.eersapi.teams.microsoft.com
  • mgmt-app.global.prod.ecdn.microsoft.com
  • cloudblogsdynamics-prep2.microsoft.com
  • europe.tip1.powerbi-staging.microsoft.com
  • dl.delivery.mp.microsoft.com
  • docs.standards.microsoft.com
  • tip1.powerbi-staging.microsoft.com
  • dnssalesession.dev.pubsuites.microsoft.com
  • contactcenter.microsoft.com
  • glb.ingestion-dev.trafficshaping.dsp.mp.microsoft.com
  • preview.microsoft.com
  • tokenservice-dev.unified.microsoft.com
  • ecs.communication.microsoft.com
  • LogManagerService.ind.manage.microsoft.com
  • webinars.flow.microsoft.com
  • store-images-origin.microsoft.com
  • standardsledger-dev.microsoft.com
  • self.events.data.microsoft.com
  • int.convai.speech-test.microsoft.com
  • xiadpartnerevents-dev.microsoft.com
  • benefitsnow.microsoft.com
  • surveyplatformdev.microsoft.com
  • community-staging.flow.microsoft.com
  • lb.pilot.papyrus.microsoft.com
  • tech.microsoft.com
  • azure.microsoft.com
  • resourcemanager-scanx-bl-ppe.scanx.esrp.microsoft.com
  • group-dev.unified.microsoft.com
  • 1d.tlu.dl.delivery.mp.microsoft.com
  • dev.workingtime.verticals.teams.microsoft.com
  • prodscussu0.dedup.microsoft.com
  • careers.microsoft.com
  • entitlementsfederationinternal.mp.microsoft.com
  • digitalsupplychain.test.microsoft.com
  • visualstudio.microsoft.com
  • noam.eus.eers.services.teams.microsoft.com
  • support.microsoft.com
  • dynamics.microsoft.com
  • displaycatalog1p-int.mp.microsoft.com
  • my.microsoft.com
  • mdav-uk.endpoint.security.microsoft.com
  • fd.api.orgmsg.microsoft.com
  • support.flow.microsoft.com
  • assets.microsoft.com
  • mgmt-app.weu.eur.prod.ecdn.microsoft.com
  • dnamanager.dna.teams.microsoft.com
  • lp.microsoft.com
  • test.microsoft.com
  • tlu.dl.delivery.mp.microsoft.com
  • billingservicetip.cp.microsoft.com
  • mdav-us.endpoint.security.microsoft.com
  • lyncdiscover.microsoft.com
  • media.microsoft.com
  • pim.microsoft.com
  • enterpriseenrollment.microsoft.com
  • go.microsoft.com
  • noam.sus.eers.services.teams.microsoft.com
  • beta.microsoft.com
  • gccaz.conversationservice.infra.gcc.teams.microsoft.com
  • accounts.microsoft.com
  • portal.sdg.teams.microsoft.com
  • v20.events.data.microsoft.com
  • nam.api.medeina-dev.defender.microsoft.com
  • emea.weu.eers.services.teams.microsoft.com
  • cdn-dynmedia-1.microsoft.com
  • innersource.microsoft.com
  • opensource.microsoft.com
  • serverproxy.mtapi.ppe.sls.microsoft.com
  • api.smartdc.microsoft.com
  • sphereblobweus.azurewatsontest.microsoft.com
  • ring0.noam.eersapi.teams.microsoft.com
  • download.microsoft.com
  • marketplace.microsoft.com
  • mdav-eu.endpoint.security.microsoft.com
  • appsource-dev.cascade.microsoft.com
  • releasenotes.flow.microsoft.com
  • packages.microsoft.com
  • tdspp.microsoft.com
  • connect.microsoft.com
  • onlinestores.metaservices.microsoft.com
  • ecstuat.microsoft.com
  • jobs.microsoft.com
  • csohub.microsoft.com
  • EU.mtm.microsoft.com
  • pidplusapi.one.microsoft.com
  • krs.microsoft.com
  • eastasia.api.cognitive.microsoft.com
Microsoft breach history
Has Microsoft experienced a recent breach? Start a free trial of Nudge Security for a full breach history and other security program details.
Try Nudge free

Authentication

AUTHENTICATION / SSO

Supported Okta Features
Login with Google support
Login with Microsoft support
Supports SSO
Two-factor authentication via SMS
Two-factor authentication via E-mail
Two-factor authentication via Hardware
Two-factor authentication via Software
Two-factor authentication via TOTP
Two-factor authentication via U2F

oauth details

  • 1042711360563-129bfkfesg6j8p8l6bg0fd0l4hps4t0h.apps.googleusercontent.com - Microsoft.com
  • E-mail: abxu@microsoft.com
  • Terms of Service:
  • Privacy Policy: https://about.ads.microsoft.com/en-us/resources/policies/microsoft-advertising-agreement
  • 445112211283-vku44lnd9cu6mtlruugvr16obge1lkem.apps.googleusercontent.com - Microsoft apps \u0026 services
  • E-mail: M365devac@microsoft.com
  • Terms of Service:
  • Privacy Policy:
  • 862726500644-mba83qqf9kq69c5mk9u5h2dn4iocdspq.apps.googleusercontent.com - Windows
  • E-mail: commapps@microsoft.com
  • Terms of Service: https://lh3.googleusercontent.com/4vGjAYxPzYhjKeklAuBqXPCUcCza6Tdg05Jm9O3UKpeaxQTmXM-AdTUch5slGR30qD0
  • Privacy Policy: https://go.microsoft.com/fwlink/?LinkId\u003d390213
  • 445112211283-61c9mrk8i55mfr882g61p37m8j2nga3q.apps.googleusercontent.com - Microsoft apps \u0026 services
  • E-mail: M365devac@microsoft.com
  • Terms of Service:
  • Privacy Policy:
  • 1042711360563-q4968hh1r6s8la2t75c8t9cg20uem12t.apps.googleusercontent.com - Microsoft.com
  • E-mail: abxu@microsoft.com
  • Terms of Service:
  • Privacy Policy: https://about.ads.microsoft.com/en-us/resources/policies/microsoft-advertising-agreement
  • 1077476731478-rkm2njbbnpf033uq99f6gal9nf79jjen.apps.googleusercontent.com - Microsoft Advertising
  • E-mail: bingadsgoogletoken@microsoft.com
  • Terms of Service: https://lh3.googleusercontent.com/L-epMxjpeLW3NHBtcoHXrdKKbbzu6YNWiiofNHWjcEDFaXNKDXQiKq63DnGxOXEEYw
  • Privacy Policy: https://about.ads.microsoft.com/en-us/resources/policies/microsoft-advertising-agreement
  • 1057459215779-l3uvdm899ucea09atcc09d9rq6uvkilv.apps.googleusercontent.com - Microsoft Corporation
  • E-mail: secopsie@microsoft.com
  • Terms of Service: https://lh3.googleusercontent.com/liS0Oq_v1f6UB81047PpYMx3JHFZGWhptrM5b-eZHxjPhlyyUUR8Zw8gShHFv6LzKw
  • Privacy Policy: https://login.live.com/gls.srf?urlID\u003dWinLiveTermsOfUse
  • 445112211283-sk04feuogpcjd3dq8eshrdnr4bpm1sfk.apps.googleusercontent.com - Microsoft apps \u0026 services
  • E-mail: M365devac@microsoft.com
  • Terms of Service:
  • Privacy Policy:
  • 1042711360563-om6fcjqhv3u8026nh866bmtfr80qkjmt.apps.googleusercontent.com - Microsoft.com
  • E-mail: abxu@microsoft.com
  • Terms of Service:
  • Privacy Policy: https://about.ads.microsoft.com/en-us/resources/policies/microsoft-advertising-agreement
  • 639188481088-c2nvr8kbh33s2v06gooask751o1hgis1.apps.googleusercontent.com - Microsoft Advertising
  • E-mail: bingadsgoogletoken@microsoft.com
  • Terms of Service: https://lh3.googleusercontent.com/q_TZGRSCVKB6gn4eTnR_idz1Zb7qFwWdugpT2vpWv8-nrhgvfKwG3MuOpUmEigjh
  • Privacy Policy: https://about.ads.microsoft.com/en-us/resources/policies/microsoft-advertising-agreement
  • 445112211283-8hj5uor2tp387i59rq1caep2rr5lnkcj.apps.googleusercontent.com - Microsoft apps \u0026 services
  • E-mail: M365devac@microsoft.com
  • Terms of Service:
  • Privacy Policy:
  • 445112211283-gnou5q7v3a75gds00caejecgtt69ne4m.apps.googleusercontent.com - Microsoft apps \u0026 services
  • E-mail: M365devac@microsoft.com
  • Terms of Service:
  • Privacy Policy:
  • 1035877495712-nhd9fdtbvgj7sa4ue55jmq6i4i46ktmp.apps.googleusercontent.com - Content Reel Login App
  • E-mail: designtools@microsoft.com
  • Terms of Service:
  • Privacy Policy: http://www.contentreel.design/license-terms/Microsoft-Content-Reel-plug-in-for-Figma-design-application.pdf
  • 639188481088-b55d4bqnr3fcr7r3ps8v5ld0ku05orlo.apps.googleusercontent.com - Microsoft Advertising
  • E-mail: bingadsgoogletoken@microsoft.com
  • Terms of Service: https://lh3.googleusercontent.com/q_TZGRSCVKB6gn4eTnR_idz1Zb7qFwWdugpT2vpWv8-nrhgvfKwG3MuOpUmEigjh
  • Privacy Policy: https://about.ads.microsoft.com/en-us/resources/policies/microsoft-advertising-agreement
  • 445112211283-i3tvsbc5dhp3p0n5co5c1in6ih4v23un.apps.googleusercontent.com - Microsoft apps \u0026 services
  • E-mail: M365devac@microsoft.com
  • Terms of Service:
  • Privacy Policy:
Microsoft OAuth Grants
Is Microsoft connected to your other business apps? Start a free trial of Nudge Security to see all app-to-app OAuth grants.
Get started

Supply Chain

Apps in Microsoft's supply chain
  • Microsoft Azure
  • Akamai
  • Microsoft Dynamics 365
  • Apple Business Manager
  • Khoros
  • Salesforce.com
  • WP Engine
  • Experience League
  • Mailgun
  • Marketo
  • Google Analytics
  • Facebook
  • Phenom
  • HubSpot
  • DocuSign
  • Office
  • SendGrid
Microsoft supply chain breach history
Has Microsoft experienced a recent supply chain breach? Start a free trial of Nudge Security for a full breach history and other security program details.
Start your trial

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.