Start here · 2 weeks
Cloud security assessment for Azure and Microsoft 365
A cloud security assessment gives you an honest, evidence-based picture of where your Microsoft cloud stands. Over two weeks we review your Entra ID configuration, Microsoft 365 Defender, Conditional Access, privileged access, logging, and Azure workload security against a structured framework, then hand you a scored report and a remediation roadmap ranked by risk.
What's included
- Entra ID review: privileged roles, MFA coverage, legacy authentication, guest access
- Conditional Access and device compliance policy review
- Microsoft 365 Defender and Secure Score baseline (Defender for Office, Endpoint, Identity)
- Azure workload checks: network exposure, storage access, Key Vault, RBAC
- On-premises Active Directory hygiene check: privileged groups, legacy protocols, delegation
- Logging and monitoring coverage gaps
- Written findings report with severity ratings and a prioritized remediation roadmap
- A debrief call to walk through the results
How we work
Scope
A fixed statement of work: what we will do, what you receive, and the timeline. Agreed before any work starts.
Execute
We do the work in your tenant with least-privilege access, with updates at defined checkpoints - not radio silence.
Hand off
Documentation, runbooks, and a walkthrough so your team can operate what we built.
Cloud Security Assessment: common questions
How long does a cloud security assessment take?
Two weeks from kickoff to debrief. The first few days are read-only data collection in your tenant; the rest is analysis and report writing.
What access do you need?
Time-boxed, least-privilege read access to your Microsoft 365 and Azure tenants - typically Global Reader and Security Reader in Entra ID plus Reader on the relevant Azure subscriptions. Access is removed when the engagement ends.
Does the assessment cover both Azure and Microsoft 365?
Yes. It covers Entra ID, Microsoft 365 Defender and Purview basics, Conditional Access, and Azure subscription and workload security in a single engagement.
How much does it cost?
The assessment is a fixed-scope engagement quoted up front in a written statement of work, so you know the price and the deliverables before any work starts.
Related services
Talk to a senior architect about cloud security assessment
A short call to understand your environment, then a fixed-scope proposal. Based in Denver, Colorado; we work with clients across the US remotely.