Free assessment

Find out what would actually stop an attack

Most of what we find is not missing products. It is features you already pay for that were never switched on. Forty-five minutes to find out which.

Free45 minutes, plus a written summary within three working days

Who books this

  • A customer, insurer or tender has asked how you secure their data
  • You have security products but nobody is certain what they are set to do
  • You are on Business Premium or E5 and suspect you are not using it
  • Something happened recently, to you or to someone you know

What you get

  • What your existing licences already cover, and which of it is switched off
  • The identity, endpoint, email and backup gaps, ranked by risk removed per pound
  • A plain answer on whether you would pass Cyber Essentials today
  • What we would do first, and what is not worth doing at all

What we need from you

  • Read access to your Microsoft 365 security and compliance settings, or a screen share
  • An honest answer on who has administrative accounts, including old ones
  • Whether anyone has tested a restore, and when
When not to book this

If you already run managed detection and response, patch to a documented standard and test restores on a schedule, this is not for you. We would be reading your reports back to you.

One we have done

Certified Cyber Essentials

How a client closed its security gaps and achieved Cyber Essentials certification, meeting the assurance its contracts and supply chain demanded.

Read what we actually did

A UK client. Our case studies are anonymised at our clients’ request, so they name no client and no sector.

Other assessments

  • Microsoft estate review: Forty-five minutes and a written summary. What you are licensed for, what is switched on, where the gaps are, and what we would fix first.
  • Cloud cost review: Non-production running around the clock, orphaned resources nobody decommissioned, and licences still assigned to leavers. Forty-five minutes to quantify yours.
  • Cyber Essentials readiness check: The five control themes, checked against what you actually run. Most first-time failures are the same handful of things, and all of them are cheaper to fix before you apply.
  • Application compatibility assessment: Migrations do not stall on operating systems, they stall on a handful of applications nobody can account for. This sorts your estate into the four groups that actually matter, before you commit budget to any of it.
  • Virtual desktop review: Whether you are choosing between Azure Virtual Desktop and Windows 365 or already running one and paying more than you expected, this is the same review: what the estate is doing, what it costs, and what it should cost.
  • Copilot readiness check: Copilot does not grant anyone a single permission they did not already have. It just makes what they already had very easy to find, which is why the permissions work belongs before the licences and not after.
  • Backup and recovery review: Everyone has a backup. Far fewer have a restore. The question worth answering is not whether jobs are running, it is when somebody last proved one and how long the business would be down.
  • Application and reporting discovery: Most bespoke software goes wrong at scoping rather than in the build, and the most valuable thing a first conversation can do is establish whether you should be commissioning software at all.
  • Endpoint and Intune review: Not whether Intune says the estate is compliant, but whether that means what you think it means: what is enrolled, what has gone quiet, which policies are actually winning, and what you could prove if somebody asked.