Skip to content
// Fixed-Price Assessment

Microsoft 365 Tenant Review

One week inside your Microsoft 365 tenant: identity, conditional access, licensing waste, and email security, with fixes in priority order.

Connect with us
Duration1 week
Your timeAbout 1 hour
Changes to your environmentNone
PricingSet on the scope call

What you get

  • Identity and MFA coverage findingsWho can sign in from where with what, which accounts skip MFA, and which legacy protocols are still open.
  • Conditional access reviewThe policies you have versus the policies an environment like yours needs, with the gaps named.
  • Licensing waste reportUnassigned licenses, over-licensed users, and features you pay for twice through overlapping SKUs.
  • Email security postureSPF, DKIM, and DMARC actually verified, plus anti-phishing and forwarding rules an attacker would love.
  • Sharing and guest access reviewWhat your tenant shares externally by default, and which old guest accounts still have a key.

What we need from you

  • A Global Reader role (read-only; we do not need or want Global Admin).
  • Your license count and renewal date, for the waste math.
  • Thirty minutes with IT at kickoff and thirty at the walkthrough.

Timeline

Days 1–3

Collection and review: identity, policies, licensing, mail flow. Urgent exposures flagged same-day.

Days 4–5

Written findings with the fix list in priority order, then the walkthrough.

Who it's for, and who it isn't

A fit if
  • The tenant grew organically and nobody has ever reviewed it end to end.
  • You are paying for licenses you cannot account for.
  • Phishing keeps almost working and you want the holes closed.
Not a fit if
  • Tenant-to-tenant migrations or consolidations. That is project work; this review often precedes it.
  • Google Workspace estates. Ask us anyway, but this offer is built for Microsoft 365.

Sample deliverable: table of contents

  1. 1 · Executive summary
  2. 2 · Identity and MFA findings
  3. 3 · Conditional access gaps
  4. 4 · Licensing waste, itemized
  5. 5 · Email security posture (SPF/DKIM/DMARC)
  6. 6 · Sharing and guest access findings
  7. 7 · Prioritized fix list

Common questions

What access do you need?

A Global Reader role, which is read-only by design. We neither need nor want Global Admin, and you should be suspicious of any reviewer who asks for it.

Will our users notice anything?

No. Nothing is changed, no policies are tested against live accounts, and no mail is touched. The first thing users might notice is your team closing the gaps afterward.

Do you cover Google Workspace?

This offer is built for Microsoft 365, where the depth is. If you run Workspace, ask anyway; the identity and mail-security questions rhyme, and we will tell you honestly how much of the value carries over.

Can you implement the fixes?

Yes, as scoped follow-on work, though most fix lists from this review are deliberately written so your own IT team can execute them without us.

Related

Security Posture AssessmentThe whole-environment version when the tenant is only part of the question.Co-Managed ITSomeone to own the fixes, alongside your team.All fixed-price assessmentsThe full catalogue.

Connect with us about your tenant.

One week, read-only access, and a fix list your own team can run. Scope call takes fifteen minutes.

Connect with UsCall 469-209-5242