Fixed price · Buy online

Find out how exposed your Microsoft 365 really is.

A fixed-price, read-only review of your Microsoft 365 tenant with a prioritised remediation plan. Typical gaps are administrators without MFA, mailboxes forwarding to outside addresses and domains without DMARC that anyone can spoof.

Buy the review £495(up to 50 users)

Step 1

Buy online

Pay by card on this page, secured by Revolut. The price is fixed for tenants of up to 50 users.

Step 2

Grant read-only access

Within one business day we contact you to set up read-only access, approved by your Global Administrator. We never ask for passwords and change nothing.

Step 3

Receive your report

Findings ranked by risk with the exact fix for each one, within five business days of access.

What we check

  • Multi-factor authentication coverage and legacy authentication
  • Conditional Access policies and break-glass accounts, where your licence includes Entra ID P1
  • Global and privileged administrator accounts
  • Tenant-wide external sharing settings for SharePoint, OneDrive and Teams
  • Email authentication: SPF, DKIM and DMARC for your domains
  • Mailbox forwarding rules and anti-phishing settings
  • Device compliance and Intune enrolment, where licensed
  • Microsoft Secure Score and its highest-impact actions

What you receive

  • Written report ranked by risk: critical, high, medium, low
  • Remediation plan with the exact setting to change for each finding
  • Summary page for directors, in plain English
  • Optional fixed quote to carry out the changes for you

Order your review

£495, no VAT charged. You pay securely by card on this page, processed by Revolut.

Payments are processed by Revolut. We do not see or store your card details.

Common questions

Do you change anything in our tenant?

No. The review uses read-only access that your administrator approves and can revoke at any time from Microsoft Entra. When the review ends we ask you to remove it and confirm in writing; we keep no standing access.

What do we need to provide?

A Global Administrator to approve access, and the domains you send email from. Nothing else.

Who is it for?

UK businesses of up to 50 users on Microsoft 365 Business Basic, Standard or Premium, or Office 365 E3/E5. Some checks, such as Conditional Access and device compliance, need Entra ID P1 or Intune; where your licence does not include them, the report says so and explains what to check instead. Larger tenants are quoted separately.

Is this a penetration test or a certification?

No. It is a configuration review against Microsoft and NCSC guidance. It helps you prepare for Cyber Essentials but is not a certification.

Can you fix what you find?

Yes. With the report you receive an optional fixed quote to make the changes. There is no obligation.

What if you cannot get access?

If access is not granted within 30 days of payment, you can ask for a full refund.