Barracuda's free Microsoft 365 Email Threat Scan

See what threats are hiding in your Microsoft 365 inboxes.


Scan your Microsoft 365 environment.
It’s fast, free and safe — with no impact on email performance.


Find dangerous gaps in your Microsoft 365 email security.

98% of organizations with Microsoft 365 have malicious emails in their mailboxes. Barracuda Email Threat Scanner has identified more than 10 million spear phishing attacks sitting in organizations’ email environments.


See who in your organization is most vulnerable to a breach.

Spear phishing and domain fraud put your organization at risk. Using artificial intelligence and API integration with Microsoft 365, Barracuda Email Threat Scanner identifies which of your employees are most targeted by attackers.


Identify frequent attack types, your DMARC status, and more.

16,000+ organizations have run this scan and discovered advanced threats in their inboxes. It’s 100% free and you’ll start seeing results within minutes of starting your scan.

Detect email threats that got past your email gateway.


See which threats are in your Microsoft 365 mailboxes.

Our artificial intelligence platform understands email sender intent to detect social engineering attacks. Get a comprehensive look at each email threat, broken down by time, employee, and threat type, and an overview of your domain DMARC status.


Identify which threat types you’re most exposed to.

Conversation hijacking. Extortion. Impersonation attacks. Phishing. Scamming. We’ll break each threat type down for you and identify which ones made the biggest impact on your mailboxes over the past 12 months.


Determine which of your employees are most at-risk.

Email threats aren’t distributed equally across your employees. Investigate who in your organization is most at-risk by looking at their titles, conversation risk factors, and the total number of attacks directed at them.


Check your DMARC protection status.

DMARC (Domain-based Message Authentication Reporting and Conformance) is an email authentication standard that was established to block domain spoofing. See your domain DMARC status and make sure your brand is protected from impersonators.


Start detecting threats within minutes.

Within minutes of starting your scan, you’ll start seeing individual email threats identified by the scanner in real-time. Once your scan is complete, you can explore your results in full and share them with your team as a clean report.

16,000+ organizations

have run this scan and discovered advanced threats in their Microsoft 365 mailboxes.


scans completed

since 2018

18 million


have been scanned for threats

12 million

spear phishing attacks

identified to date

“There were 450 severe email threats sitting in our Microsoft 365 spread across all kinds of users and Email Threat Scanner identified the most at-risk users. It was a simple scan that took less than a minute to setup and scanned all the mailboxes. It produced a great report that I took to our CIO.”

Brian Gancherov

VP Security Solutions, Entisys360