Free — No Commitment

Know Your M365 Security Posture in 5 Days.

Most organizations don't know how their Microsoft 365 environment actually looks from a security and compliance perspective — until an audit or an incident forces the question. Our free assessment answers it first.

5-day turnaround · No cost · No commitment · Read-only access only

What You Receive

Five Deliverables. Clear Picture.

Every assessment produces the same five deliverables — a complete picture of where your M365 environment stands, and a structured plan to improve it.

Tenant Health Score

A 0–100 security and governance score with component breakdown across identity, data, devices, and compliance.

Prioritized Findings

Every gap ranked by severity — Critical, High, Medium, Low — with plain-language explanation and remediation guidance.

Compliance Gap Analysis

Findings mapped to HIPAA Technical Safeguards, CMMC 2.0, NIST 800-171, or CIS M365 Foundations as applicable to your industry.

90-Day Remediation Roadmap

A structured action plan prioritizing the highest-risk issues first, with effort estimates and dependency mapping.

Executive Summary Report

A non-technical summary for stakeholders and leadership — risk narrative, top findings, and recommended investment priorities.

Ready to see where your tenant stands?

Assessment Scope

Every Layer of Your M365 Environment.

Our assessment covers the full Microsoft 365 security and governance surface area — from identity and conditional access through data protection and device management. We use TenantForge to automate the discovery and supplement with manual review of complex configurations.

Entra ID configuration and identity governance

Conditional Access policy completeness

Multi-factor authentication enforcement and coverage

Microsoft Secure Score review and gap analysis

SharePoint external sharing and permission controls

Teams governance and guest access settings

Exchange Online security configuration

Microsoft Purview and sensitivity label deployment

Intune device management and compliance policies

Audit log configuration and retention

Microsoft Defender for M365 deployment status

Administrative roles and privileged access review

The Process

From First Call to Final Report in 5 Days.

Discovery Call

A 30-minute call to understand your environment, compliance requirements, and what concerns you most. We confirm scope and agree on access requirements.

Environment Access

We request read-only delegated access to your M365 tenant. No changes are made during the assessment. All access is via official Microsoft APIs.

Assessment Execution

We run TenantForge against your tenant and supplement with manual review of complex configuration areas. The assessment typically takes 1–2 days to execute.

Analysis & Report

We analyze findings, map to your applicable compliance frameworks, prioritize by severity, and write the remediation roadmap. This takes 2–3 days.

Findings Presentation

A 60-minute walkthrough of findings with your team — explaining each issue, its risk, and the recommended remediation. Questions answered in depth.

Powered by TenantForge

Every free assessment runs on TenantForge — our purpose-built Microsoft 365 governance platform. TenantForge runs a comprehensive tenant scan in minutes and maps findings to your compliance frameworks automatically. What used to take days of manual work is now structured, repeatable, and accurate.

FAQ

Common Questions

Is the assessment really free?

Yes. No cost, no commitment, no contract. We provide the full assessment, report, and findings presentation at no charge. The only thing we ask is that you consider us when you decide to act on the findings.

What access do you need to conduct the assessment?

We request read-only delegated access to your Microsoft 365 tenant via the Microsoft Graph API. We use a registered application with minimum necessary permissions — no admin credentials, no password sharing. All access is logged, auditable, and can be revoked at any time from your Entra ID admin center.

How long does the assessment take?

The full process — discovery call through findings presentation — takes approximately 5 business days. The assessment execution itself runs in 1–2 days once we have access. The remaining time is analysis, report writing, and scheduling the presentation.

What if we're not ready to engage with a vendor yet?

That is exactly when to get the assessment. The assessment gives you a clear picture of your M365 environment with no obligation. Many clients receive the report and handle remediation internally. We do the assessment because it creates informed buyers — not because it locks you in.

Do you sign an NDA before the assessment?

Yes, we're happy to sign a mutual NDA before beginning the assessment. We also have our own data handling and confidentiality agreement that covers how we use and store tenant data during and after the engagement. Contact us to receive a copy.

Is Your M365 Tenant Secure and Governed?

Most organizations don't know the answer until an audit — or an incident — makes it urgent. Find out now, while there's still time to act.

30-minute discovery call · No cost · No commitment · No sales pressure