For lean IT teams and MSP partners
Find out where you stand, then decide what to fix.
I built these from the checks I run at the start of real projects. Each one gives you a score, the specific gaps, and a draft project plan with effort ranges, whether you do the work yourself or bring me in.
Private by design. Exports you load are read by your browser and never uploaded. If you ask for the full report, I receive your contact details, your score and the titles of the top findings, nothing else.
Identity and access
MFA coverage gap report
Who has no MFA, which admins lack phishing-resistant sign-in, and who is stuck on SMS.
Entra exportConditional Access assessment
Your policies checked against a sound baseline: legacy auth, admin protection, risk, devices, break-glass.
Data and collaboration
Copilot readiness and oversharing
Copilot shows people everything they can already open. See what is overshared before you turn it on.
SharePoint exportExternal sharing exposure
Anyone links, sites shared outside, and guests who never signed in.
Email domain security check
SPF, DKIM, DMARC and MTA-STS in ten seconds. Can someone send email as you?
QuestionnaireEmail gateway to Defender migration
What Defender for Office 365 replaces, the license change, savings range and a cutover plan.
Modernization
Group Policy to Intune planner
Which settings move straight across, which need another approach, and what to delete.
QuestionnaireAD and Exchange retirement planner
What still depends on your domain controllers and Exchange, and the path to cloud-only.
Security operations and compliance
Microsoft Sentinel cost estimator
Monthly cost range, free data you are not using, and gaps in what you would see.
QuestionnaireCyber insurance readiness
The controls insurance applications commonly ask about, and what to fix before renewal.
QuestionnaireCMMC Level 2 readiness scorer
An estimated SPRS score from the 110 NIST SP 800-171 requirements, with gaps by family.
Need evidence for an audit every month?
My audit evidence kits are Azure Logic Apps that collect MFA, Conditional Access, privileged access, device compliance, audit and guest evidence from Microsoft 365 on a schedule and save dated files to SharePoint for your assessor.