Microsoft 365 security assessment

Find the gaps in your Microsoft 365 security configuration.

AuditTenant assesses your tenant's security settings and delivers evidence-backed findings, practical recommendations, a detailed technical report and an executive briefing.

See the reports

Read-only access, approved by your administrator. Nothing in your tenant is changed.

Review Collaboration · External sharing

Files can be shared with anyone, without sign-in

Observed
SharePoint and OneDrive allow Anyone links tenant-wide.
Why it matters
A forwarded link gives access to whoever holds it.
Recommendation
Limit sharing to New and existing guests, then allow Anyone links only on sites that need them.

Linked to evidence · Included in both reports

Illustrative examples. Not customer data.

Coverage

Depth across the workloads that matter.

AuditTenant reads the configuration behind each workload, not just a headline score. Where evidence cannot be collected, the report says so instead of treating the area as healthy.

  • Identity and access

    Conditional Access policies, privileged role assignments, authentication method registration, app consents and credential expiry.

  • Devices and Intune

    Managed device compliance, compliance policies, Windows configuration profiles, update rings and mobile app protection.

  • Email security

    SPF and DMARC for your verified domains, and inbox rules that forward mail.

  • Collaboration

    SharePoint and OneDrive sharing, guest invitation and resharing, idle session timeout, sync restrictions and group lifecycle.

  • Data protection

    Sensitivity label inventory.

  • Licensing

    Subscriptions, assignments, and account activity over 30, 90 and 180 days.

  • Microsoft Secure Score

    Your score, achieved points and control profiles, shown alongside the assessment.

How it works

Three steps from read-only access to a clear action plan.

You approve access once. AuditTenant reads your settings, compares them with Microsoft guidance and writes up what it finds. Your team decides what to change.

  1. Step 1

    Connect

    A Microsoft 365 administrator approves read-only access. Nothing in your tenant is changed.

  2. Step 2

    Assess

    AuditTenant reads the configuration of each supported workload and compares it with Microsoft guidance and established practice.

  3. Step 3

    Act

    You receive findings with their evidence, recommendations, a technical report and an executive briefing. Your team decides what changes first.

Reports

One assessment. Two reports, for two audiences.

Engineers need the detail to make changes. Leadership needs the picture to set priorities and fund them. Both reports come from the same evidence.

Technical assessment report

PDF · Word · HTML

For IT and security teams

Workload-by-workload configuration detail, every finding with its evidence, recommendations, and a clear record of what could not be assessed.

  • Plan and assign remediation work
  • Check each change against the observed setting
  • Keep a dated record of your configuration

Executive briefing

PowerPoint

For leadership and decision-makers

Security posture in context, the findings that matter most, recommended priorities and the decisions needed next, without the technical detail.

  • Explain risk in business terms
  • Agree priorities and ownership
  • Support budget and roadmap decisions

Report visuals are illustrative layouts with example values, not customer results.

Licensing review

Find licence spend worth a second look.

The same assessment highlights licence capacity that is paid for but unassigned, and disabled accounts that still hold licences.

Each opportunity arrives with its evidence, so you can review it with confidence. Your contracts, renewal dates and retention needs decide what is actually saved.

Licensing opportunitiesTo review
Microsoft 365 E3Unassigned capacity
14 unassigned
Microsoft 365 E5 SecurityUnassigned capacity
3 unassigned
Disabled accountsLicences still assigned
6 accounts
Illustrative example values. Not a savings estimate.

Feedback

In their words.

“We needed an assessment we could confidently take to leadership. Audit Tenant helped us explain the risks, justify our priorities, and agree on a clear path forward.”
Customer feedback
“Audit Tenant gave us confidence that we understood our Microsoft 365 security posture. The findings were clear, the recommendations were practical, and our team knew exactly where to focus.”
Customer feedback
“What earned our trust was the detail behind the findings. We could understand why an issue mattered and make informed decisions about how to address it.”
Customer feedback
“As a consultant, my reputation depends on the quality of the advice I give. Audit Tenant helps me support customer recommendations with clear findings and explain them with confidence.”
Consultant feedback

Pricing

One assessment. Choose what you receive.

Proposed pricing, subject to confirmation

Proposed packages compared
Included Technical£199 RecommendedComplete£349 Guided£699
Security configuration assessmentIncludedIncludedIncluded
Findings with evidence and recommendationsIncludedIncludedIncluded
Licensing review opportunitiesIncludedIncludedIncluded
Technical report: PDF, Word, HTMLIncludedIncludedIncluded
Executive PowerPoint briefingNot includedIncludedIncluded
Consultant-led walkthroughNot includedNot includedIncluded
Priority and dependency reviewNot includedNot includedIncluded

Proposed one-time prices per tenant assessment. Commercial terms are not yet final, and remediation work is not included.

Customer sign-in is not available in this preview.

FAQ

Before you start.

What access does AuditTenant need?

A Microsoft 365 administrator approves read-only access to configuration data. The assessment reads settings and does not change anything in your tenant.

Are the recommendations specific to our tenant?

Each recommendation is linked to a finding observed in your tenant and the settings, accounts or policies it affects. The guidance draws on Microsoft recommendations and established practice, and your team adds the business context.

Does it cover every Microsoft 365 setting?

No assessment can honestly claim that. AuditTenant covers the supported areas listed above in depth, and the report states clearly where evidence was unavailable.

Will it tell us how much we can save on licences?

It identifies opportunities to review, such as unassigned capacity and disabled accounts with licences. Actual savings depend on your contracts, renewal dates and retention requirements.

Can we buy an assessment today?

Pricing is proposed. This is a preview of the AuditTenant website. Online sign-up is not yet connected.

See your Microsoft 365 security clearly.

Evidence-backed findings, practical recommendations, and reports for every audience.

Get your assessment