Microsoft 365 Tenant Review
Identity, licensing waste, conditional access, and email security findings.
Who it’s for
- Any company running Microsoft 365 without a recent review
- Teams planning a Copilot rollout
- Companies preparing for cyber insurance renewal
What you get
- Findings ranked by risk
- License waste summary
- Conditional access gap list
- Email authentication status
- Copilot readiness notes
- Remediation roadmap
The deliverable is yours whether or not you hire us for what follows.
What we need from you
- Read-only admin role (Global Reader)
- Half-hour interview
What we check
- MFA coverage, including admins and service accounts
- Stale and guest accounts
- Admin role assignments
- Conditional access policies
- Legacy authentication
- External sharing settings
- Overshared SharePoint and OneDrive content
- Mailbox forwarding rules
- SPF, DKIM, DMARC
- Defender configuration
- Audit logging
- Unused and duplicate licenses
How it works
- 0115-minute scope callConfirm the assessment fits your situation and agree the fixed fee. If it does not fit, we say so and nobody has spent anything.
- 02Access and kickoffRead-only access, an export, or a short interview, depending on the assessment. We list exactly what we need before you commit.
- 03The workOne to three weeks depending on the assessment, with a mid-point check-in so nothing lands as a surprise.
- 04Written deliverable and walkthroughA document your team keeps, presented live with time for questions. What happens next is your call.
Common questions
Will our users notice anything?
No. Nothing is changed, no policies are tested against live accounts, and no mail is touched. The first thing users might notice is your team closing the gaps afterward.
Do you cover Google Workspace?
This review is built for Microsoft 365, where the depth is. If you run Workspace, ask anyway; the identity and mail-security questions rhyme, and we will tell you honestly how much of the value carries over.
Can you implement the fixes?
Yes, as scoped follow-on work, though most fix lists from this review are deliberately written so your own IT team can execute them without us.
Part of Microsoft 365, Identity & Security Hardening.
Book a 15‑minute scope call.
You describe the problem. We tell you what fixing it takes, what it costs, and whether we are the right firm for it.