Sample Report

AlphaSec · Microsoft 365 Security · Automated Hardening Audit

Automated Microsoft 365 Security Hardening Audit

A one-time, read-only 28-point inspection of your Microsoft 365 tenant and email DNS records — delivered as a clear Red, Amber & Green traffic-light report with exact actions.

View Sample Traffic-Light Report → Download Sample PDF Request Free M365 Tenant Audit

Why a public snapshot is only half the picture

Our free public-record snapshot checks your outside door: SPF, DKIM, DMARC and website SSL. But most costly breaches in solicitors’ practices, accountancy firms and SMEs happen inside Microsoft 365 after a single staff member approves a bogus sign-in prompt.

Our Automated Microsoft 365 Security Hardening Audit is a one-time, read-only inspection of 28 critical controls inside your tenant. You get a complete Red, Amber & Green audit sheet showing exactly what is exposed, why it matters, and the exact admin action to lock it down.

See the full 28-point Sample Report (Severn Gate Legal LLP) →

How the automated inspection works

  1. Live DNS & Spoofing Check: Automated inspection of MX, SPF, DKIM (selector1/selector2), DMARC enforcement and MTA-STS.
  2. Read-Only Graph Telemetry: A 10-minute read-only session inspects Entra ID, Exchange Online, SharePoint, Teams and Intune settings—nothing is changed during the audit.
  3. Traffic-Light Audit Sheet: Every control is rated Red (Action Required), Amber (Worth Hardening) or Green (All Good), mapped against Business Standard vs Business Premium licences.
  4. Remediation Roadmap: Hand the action sheet to your IT team, or ask us to lock down the Red and Amber findings for a fixed upfront price.

The 28 controls we test across your Microsoft 365 tenant

1. Sign-in & MFA (6 checks)

Phishing-resistant MFA & passkeys, legacy auth (IMAP/POP/SMTP) block, Conditional Access geo-blocking, SMS MFA retirement and SSPR.

2. Admin Accounts (5 checks)

Global Admin headcount, separate unlicenced admin accounts, emergency break-glass accounts, PIM and 3rd-party OAuth app consent.

3. Email & Anti-Spoofing (6 checks)

SPF hard-fail, DKIM 2048-bit keys, DMARC reject/quarantine, external auto-forwarding blocks, suspicious inbox rules and Defender Safe Links.

4. SharePoint & Teams (4 checks)

Anonymous "Anyone" link blocks, guest user expiry, external Teams chat restrictions and legacy site sharing controls.

5. Copilot & AI Governance (4 checks)

Overshared internal SharePoint folders before enabling Copilot, Unified Audit Log retention, Shadow AI blocks and sensitivity labels.

6. Backups & Devices (3 checks)

Independent cloud-to-cloud backup verification (beyond the 93-day recycle bin), Intune/BitLocker device compliance and Secure Score.

Book your one-time Microsoft 365 Hardening Audit

We connect in read-only mode, test all 28 controls across your tenant and public DNS records, and provide your complete Red, Amber & Green audit sheet with exact recommendations and actions.

Request Your M365 Audit Inspect Sample Report

Cardiff office: 029 2240 4615 · Direct mobile: 07885 972 512 · ross@alphabyte.it