Email authentication and mailbox hygiene for your tenant, scored against Microsoft's recommendations.
SPF, DKIM and DMARC on every custom domain — the DNS records that stop spoofing.
Anti-phishing, malware and spam policies, Safe Attachments and Safe Links, forwarding controls and DKIM.
Dormant mailboxes and mailboxes running out of storage quota.