Skip to Content

Safe Links

Microsoft Defender for Office 365 Safe Links provides time-of-click URL scanning and rewriting to protect against malicious links.

Note: Requires Microsoft Defender for Office 365 Plan 1 or Plan 2.

Policy Settings

SettingDescription
URL scanningScan URLs when user clicks
Real-time scanningWait for scan to complete before allowing access
Internal linksScan links within the organization
Click trackingTrack all URL clicks
Warning pagesShow warning for malicious URLs

Protected Locations

  • Email — URLs in email messages
  • Teams — URLs in Teams conversations
  • Office apps — URLs in Word, Excel, PowerPoint
  • Safe Links for admins — URLs in admin portals

Do Not Rewrite List

Specify trusted URLs that should not be scanned or rewritten:

  • Internal application URLs
  • Known safe third-party services
  • URLs causing compatibility issues

API Reference

  • GET /api/security/safe-links/policies — List policies
  • PUT /api/security/safe-links/policies/:id — Update policy
Last updated on