Free tool
How hardened is your Microsoft 365 tenant?
Microsoft ships defaults chosen to work for every organisation on earth. That's the right call for Microsoft and the wrong configuration for a business handling patient records, cardholder data or CUI. Twelve questions, about three minutes, and nothing leaves your browser.
Answers are scored in your browser. We don't transmit or store them.
Result
What's not in place
The remediation playbook Free while we test
For every gap above: why it matters, exactly where the setting lives in the admin centre, and the order to change things in so you don't lock anyone out.
- Admin centre paths for each control, not vague advice
- The sequence that avoids breaking sign-in for your staff
- Licensing notes, since some controls need a specific tier
- What auditors look for under HIPAA, PCI-DSS, SOC 2 and CMMC
A score isn't an audit. This is a self-assessment based on your own answers — useful for finding obvious gaps, not a substitute for reviewing the tenant itself. We do that as part of a free assessment. Book one or call 305-419-9992.