What we check
MFA and Conditional Access state for every user. Admin accounts and who really holds them. Legacy sign in protocols still open. Email spoofing protection: SPF, DKIM and DMARC. Licences you pay for and do not use. Secure Score and the three things that would move it most.
What you get
One page of findings, ranked. A 30 minute call to walk through it. A quote for anything worth fixing, which you are free to give to your own IT company.
What we need from you
A read only admin account (Global Reader plus Security Reader) with MFA, created by you and deleted afterwards. Two days of our time, none of yours beyond the call.
Who it is for
Owners and office managers who suspect something is off and want a straight answer without a project.