Microsoft 365 Security Posture Assessment
Automated, scored assessments across 132+ controls for your Microsoft 365 tenant. Runs read-only, inside your own environment — sensitive data is tokenised locally before anything leaves it.
How it works
Fully automated — takes about five minutes end to end.
Purchase
Choose your workload assessments and tiers, pay securely, and get a confirmation email immediately.
Download the bundle
Download the signed collector bundle from your email. Requires PowerShell 7.
Run it in your tenant
One command handles app registration, admin consent, and read-only data collection — entirely inside your own environment.
Get your report
Sensitive values are tokenised locally before anything uploads. Your scored PDF report arrives by email within minutes.
Seven workloads, one report format
Mix and match workloads and tiers. Each assessment covers one Microsoft 365 workload.
Entra ID
31 security controls
Identity, MFA, Conditional Access, privileged roles, and legacy authentication.
Exchange Online
18 security controls
Anti-phishing, DKIM, transport rules, auto-forwarding, and mail flow hardening.
Microsoft Intune
18 security controls
Device compliance, configuration profiles, BitLocker, app protection, and RBAC.
Microsoft Purview
16 security controls
Sensitivity labels, DLP, retention policies, communication compliance, and eDiscovery.
SharePoint Online
16 security controls
External sharing, anonymous links, sync client restrictions, and Conditional Access.
Microsoft Teams
15 security controls
External access, guest settings, meeting policies, app permissions, and sideloading.
Defender for M365
18 security controls
Secure Score, MDE deployment, tamper protection, attack simulation, and Safe Attachments/Links.
Privacy-first, by design
This is a security product built for security-conscious admins. Your real tenant data is tokenised on your own machine before anything is transmitted — 365Posture servers never see it.
Read the full privacy architecture →- All sensitive values — user names, domains, policy names — are tokenised on your device before anything is uploaded
- 365Posture servers only ever process tokenised, anonymised data
- The encrypted artifact is deleted immediately after scoring — never stored
- Read-only Graph API permissions only — no write access is ever requested
Basic and Advanced tiers, per workload
Basic includes a scored PDF report with remediation guidance. Advanced adds an AI-generated executive summary and remediation roadmap, built from your tokenised results — no real identifiers ever reach the AI model.
View pricingQuestions?
What data leaves your tenant, what licenses you need, how long it takes — answered plainly.
Read the FAQ