Free tool
How hardened is your Microsoft 365 tenant?
Microsoft ships defaults chosen to work for every organisation on earth. That's the right call for Microsoft and the wrong configuration for a business handling patient records, cardholder data or CUI. Twelve questions, about three minutes, and nothing leaves your browser.
Answers are scored in your browser. We don't transmit or store them.
Result
What's not in place
The remediation playbook Free while we test
For every gap above: why it matters, exactly where the setting lives in the admin centre, and the order to change things in so you don't lock anyone out.
- Admin centre paths for each control, not vague advice
- The sequence that avoids breaking sign-in for your staff
- Licensing notes, since some controls need a specific tier
- What auditors look for under HIPAA, PCI-DSS, SOC 2 and CMMC
Next step
Want an in-depth assessment?
Everything above rests on your own answers. An in-depth assessment reads the tenant itself — the Conditional Access policies that actually exist, which admins are protected, whether legacy authentication is still reachable, and how your mail authentication really resolves.
- Findings taken from live configuration, not a questionnaire
- Fixes staged in report-only mode first, so nothing breaks on day one
- Every change reversible, with the undo recorded
- Evidence you can hand to an auditor under HIPAA, PCI-DSS, SOC 2 or CMMC
A score isn't an audit. This is a self-assessment based on your own answers — useful for finding obvious gaps, not a substitute for reviewing the tenant itself. We do that as part of a free assessment. Book one or call 305-419-9992.