Microsoft 365 security
Secure Score and its recommendations, Exchange Online email security settings, and SPF/DMARC for your domains.
Microsoft 365 · Approve read-only access
Start this checkHome›Assessments
Free, read-only IT assessments.
Eleven checks across Microsoft 365, Azure, Google Workspace and your on-premises infrastructure. Each grades your environment against best practice and shows what to fix first. Nothing is ever changed.
License optimization
Unused and idle seats, licenses to right-size or drop at renewal, and estimated monthly and yearly savings.
Microsoft 365 · Approve read-only access
Start this checkIntune
Compliance, Conditional Access, Autopilot, Windows updates, encryption and out-of-support devices.
Microsoft 365 · Approve read-only access
Start this checkDefender for Endpoint
Devices not onboarded, antivirus and Tamper Protection, attack surface reduction rules, vulnerabilities and open alerts.
Microsoft 365 · Approve read-only access
Start this checkCopilot readiness
Oversharing in SharePoint, OneDrive and Teams, anyone links, sensitivity labels and sharing settings.
Microsoft 365 · Approve read-only access
Start this checkCyber-insurance readiness
MFA, admin accounts, endpoint protection, encryption, patching and email authentication: the questions insurers ask.
Microsoft 365 · Approve read-only access
Start this checkAzure cost
Idle and oversized resources, reservations and savings plans, with estimated savings across your subscriptions.
Cloud · Approve read-only access
Start this checkGoogle Workspace security
Admin roles, 2-Step Verification, sharing, email security and more, through domain-wide delegation you control.
Google Workspace · Super admin authorizes read-only scopes
Start this checkVMware vSphere
Best practices, resource use, redundancy, snapshots and lifecycle across vCenter, hosts, clusters and VMs.
On-premises · By appointment: run a read-only toolkit
Request this checkActive Directory
Privileged access, passwords, Kerberos and delegation, domain controller health and replication, and hygiene.
On-premises · By appointment: run a read-only toolkit
Request this checkNetwork security
Switch and firewall hardening, firmware and hardware lifecycle, and firewall rule hygiene. Secrets are removed before anything is sent.
On-premises · By appointment: upload backups or run the toolkit
Request this checkQuestions
About the assessments
Is it really free?
Yes. The assessments are free and self-service. If you want help fixing what they find, we scope that separately and you decide.
What access do you need?
Microsoft 365 and Azure checks use a read-only app that a Global Administrator approves; Google Workspace uses read-only scopes your super admin authorizes. You can remove access at any time. On-premises checks use a read-only toolkit you run yourself, by appointment.
Can it change anything?
No. Every check only reads settings and configuration. Nothing is created, changed or deleted.
What do I get?
A graded scorecard for each area. We then walk you through the full findings and a prioritized plan.
Why are VMware, Active Directory and network checks by appointment?
They run inside your network, so we schedule a time together and send you a one-time code to unlock the toolkit.
Want help with the results?
We turn your scorecard into a prioritized, fixed-scope plan, then do the work or support your team while they do.