Microsoft 365 security
Microsoft 365 security help for small businesses
Fixed-price reviews of MFA, admin access, email security, and tenant configuration — with optional light hardening included in the Fix-Up.
Who this is for
- You use Microsoft 365 and want confidence that MFA is fully enforced
- You have cyber-insurance questions asking about MFA, backups, email security, or access controls
- A customer sent a security questionnaire
- You want clarity on who has admin access
- You are concerned about email compromise
- You want written findings and a clear path forward
Offer comparison
| Service | Best for | Price | Includes | Deliverable |
|---|---|---|---|---|
| Free Security Call | Understanding options | Free | 30-minute conversation, straightforward guidance on which service fits | Conversation and service guidance |
| Microsoft 365 Security Snapshot | Finding common risks | $750 | MFA, admin, email, sharing, and risky configuration review | Prioritized findings summary |
| Microsoft 365 Security Fix-Up | Review plus light cleanup | $1,500 | Snapshot plus up to 2 hours of light hardening and a prioritized action plan | Findings summary and action plan |
| Framework Readiness Audit | Compliance or contract-driven review | Starting at $2,500 | Framework-aligned assessment and evidence review | Detailed report and remediation roadmap |
What the $1,500 Fix-Up includes
- Microsoft 365 tenant security review
- MFA and authentication review
- Admin account and privilege review
- Basic Entra ID security review
- Basic Exchange Online security review
- Mail forwarding and suspicious inbox rule spot check
- External sharing and collaboration risk review where applicable
- Security defaults or Conditional Access guidance
- Prioritized findings and recommendations
- Up to 2 hours of light hardening
- 30 to 60 minute walkthrough call
What the 2 hours of hardening typically includes
- Enforce MFA for all users (or scoped groups agreed in advance)
- Review and reduce Global Administrator accounts
- Block legacy authentication where tenant configuration allows
- Review mail forwarding rules and suspicious inbox rules
- Enable security defaults or baseline Conditional Access policies
- Document changes made and remaining items for your IT provider
Scope is agreed before work begins. Changes outside the 2-hour allowance are quoted separately or handed to your IT provider with written instructions.
Request a Security Fix-UpWhen you need more depth
These Microsoft 365 services focus on identity, email, and tenant security for small businesses. When your situation calls for broader coverage, we offer:
- Framework readiness audits for HIPAA, FTC Safeguards, NIST, and CMMC
- Security and compliance baseline assessments with written reports
- Remediation projects for identity, policy, and validation work
- Hourly consulting for larger custom scopes
Process
Intro call
Confirm scope, access approach, and which fixed-price offer fits your situation.
Secure information request
Collect only what is needed for the review using agreed secure methods.
Review and light hardening
Assess tenant settings and complete scoped hardening within the Fix-Up allowance.
Findings walkthrough
Walk through prioritized findings and the recommended next-step plan.
Microsoft 365 Security Snapshot — $750
A focused review of identity, admin access, and email security in your Microsoft 365 tenant. Typical turnaround is one to two weeks from kickoff to findings walkthrough.
What we review
- MFA enrollment and enforcement status
- Global Administrator and privileged role assignments
- Security defaults and Conditional Access policies
- Legacy authentication exposure
- Mail forwarding, inbox rules, and external sharing settings
- Basic Exchange Online and Entra ID security configuration
What you receive
- Prioritized findings summary
- Severity and remediation owner guidance
- 30-minute findings walkthrough call
- Recommendation on whether Fix-Up or framework assessment is the right next step
Ready to reduce Microsoft 365 security risk?
Start with a free security call, or request a fixed-price Microsoft 365 Security Snapshot or Fix-Up.