Offers

Microsoft 365 security offers for review, readiness and cleanup.

These offers are for teams that know the problem area and want a defined Microsoft 365 security engagement. Each path ends with a risk order, decision log, remediation route and operating notes.

Independent tenant review

Microsoft 365 Security Review

Independent review of identity, endpoint, mail, collaboration and audit controls, ending with a prioritised remediation backlog.

Typical budget: £1,500 to £2,500
Typical timeframe: Usually 5 working days after access and context are ready.

Best for

SMEs that know their Microsoft 365 tenant has drifted.
Teams that need a fast risk picture before audit, renewal or board review.
Internal IT teams that want an outside control review without replacing day-to-day support.

Included

Entra ID users, groups, admin roles and MFA coverage review.
Conditional Access, legacy authentication and break-glass check.
Exchange Online, SharePoint, OneDrive and external sharing review.
Intune, Defender and endpoint management coverage review.
Prioritised remediation backlog with sequencing and decision points.

Outputs

Plain-English risk summary.
Remediation tracker.
Snapshot of reviewed settings and gaps.
Output call for internal owners.

Assessment-week readiness sprint

Cyber Essentials Plus Readiness Sprint

Short readiness sprint to expose the Microsoft 365, endpoint, patching and evidence gaps most likely to derail assessment.

Typical budget: £2,500 to £5,000
Typical timeframe: Usually 2 to 3 weeks depending on access, device scope and change approval.

Best for

Teams with a booked or planned Cyber Essentials Plus assessment.
SMEs that failed a previous control check or assessor dry run.
Organisations that need collection points and remediation ownership clear before audit pressure lands.

Included

Readiness gap review across MFA, endpoint, patching and evidence.
Microsoft 365, Entra ID, Intune and Defender control review.
Remediation sequencing for controls most likely to affect outcome.
Evidence pack structure with named collection points.
Assessor-facing remediation log where useful.

Outputs

Readiness risk register.
Assessor-ready evidence list.
Remediation tracker.
Internal IT notes and assessor discussion points.

Endpoint baseline and rollout plan

Intune and Defender Cleanup Plan

Endpoint control plan for Intune, Autopilot, Defender onboarding, baselines and exception handling.

Typical budget: £2,000 to £4,500
Typical timeframe: Usually 5 to 10 working days depending on tenant and endpoint complexity.

Best for

Teams with partly managed devices and unclear compliance status.
SMEs paying for Defender or Intune but not getting useful control.
Internal IT teams that need a phased endpoint cleanup plan they can keep running.