Skip to main content

Security checks for each customer

Read Microsoft 365 configuration across 90+ catalogued checks, identify unavailable and manual checks, map assessed findings to 7 framework families, and keep unread evidence marked not read.

Start freeStart as an MSP
Example data

Contoso Dental

Security assessment

Needs attention
  • MFA enforced for privileged admin rolesPass
  • Legacy authentication protocols blockedFail
  • Safe Attachments enabled for Exchange OnlineNot read
The customer's current security score with a sample of read-only check results.

Which customer settings need attention?

Customers differ, and missing reads hide risks.

What you get

1

90+ checks

Assess Microsoft 365 against catalogued configuration checks; unavailable and manual checks are identified.

2

Framework mappings

Map assessed findings to 7 security and compliance framework families; they are mapping targets, not certifications.

3

Unread evidence identified

Investigate customer-scoped findings with source evidence and available inventory; unread evidence stays marked not read.

How it works

  1. 1

    Connect the tenant

    A customer administrator completes Microsoft consent.

  2. 2

    Review results

    The scan reports check results, with unavailable and manual checks identified.

  3. 3

    Plan the work

    Review findings with source evidence and available inventory, then stage changes that need safety checks and approval.

What gets checked

90+ security checks across the catalogue, mapped to the 7 framework families: CIS Microsoft 365 Benchmark, CISA SCuBA, SOC 2, ISO 27001, HIPAA, NIS2, GDPR.

  • Account Takeover

    17 checks

    Checks sign-in, MFA and account settings that limit account takeover.

  • Ransomware Readiness

    10 checks

    Checks device, backup and recovery settings that limit the blast radius of an attack.

  • Email Fraud & Phishing

    16 checks

    Checks anti-phishing, Safe Links and Safe Attachments settings.

  • Data Theft & Leakage

    23 checks

    Checks sharing and forwarding settings that bound where data can go.

  • Unauthorized External Access

    12 checks

    Checks legacy protocols, guest access and external sharing settings.

  • Admin & Insider Risk

    16 checks

    Checks privileged roles and admin access settings.

What needs setup

SharePoint CSOM checks produce results only after certificate access is granted.

Limits

Start free requires sign-up and covers one tenant with its score and top findings.

Framework mappings are not certifications.

Some checks stay unavailable until the required consent, licences or setup are in place.

Related documentation

Start freeStart as an MSP

Free starts with one Microsoft 365 tenant.