Identity Security Review
Who has access to what in your environment — and does it match what they actually need? The Identity Security Review goes deep on identity and permissions in Entra ID: MFA coverage, Conditional Access, administrative roles, OAuth permissions and guest access — without covering the full Microsoft 365 surface. A faster engagement with a sharp scope, performed as an independent third party.
The Identity Security Review is a focused, independent analysis of identity and permissions in Entra ID: MFA coverage, Conditional Access, roles, OAuth permissions and guest access — for organisations that want to know who really has access to what. You get a written report with risks and prioritised recommendations — faster than the full M365 assessment, read-only, at a fixed price after a free pre-analysis.
What the review covers
- Authentication methods, MFA coverage and Security Defaults
- Password policies, legacy protocols (IMAP/POP/SMTP) and session controls
- Conditional Access policies and their coverage for admins, users, guests and service accounts
- Administrative roles, least privilege and inactive users
- OAuth permissions, App Registrations, Enterprise Apps, secrets and consent settings
- Tenant region and data residency
What you get
- Written report with observations, risks and recommendations
- Prioritised by risk and practical applicability
- A faster engagement than the full M365 assessment
Out of scope
- Not a full M365 assessment
- Does not cover Exchange, SharePoint, OneDrive, Teams, Intune or endpoints beyond identity-related matters
- Unilite
- Cadpeople
- Kunde & Co
- Bitcoin Suisse
- Mercantec
- Dagrofa
- Laursens Realskole
- Zug Kommune
- Altid Vikar
- Adeo Datacenter
- A&O Kreston
- Numarics
- Geelmuyden Kiese
The assessment we received deserves a 10 out of 10 without hesitation.
80+ certifications — CISSP, CISM, CISA, ISO 27001 · More about Martin →
How it works
Free pre-analysis
We assess the scope and give you a fixed price. No obligation, no surprises.
Read-only data collection
Automated extracts via PowerShell and Graph — zero operational disruption.
Analysis & assessment
Manual specialist review with risk prioritisation and business context.
Report & plan
An executive summary for leadership, technical depth for your team — ready to act on.
Practicalities
Free and without obligation — we are given read access and assess the scope so that we can give you a fixed price.
Typically a kick-off meeting of about an hour plus setting up read access. We do the rest.
Read-only data collection — no changes to your systems and no operational disruption.
A written report with prioritised recommendations, data extracts in Excel where relevant — and a walkthrough of the results at both management and engineering level.
Frequently asked questions
When should we choose the Identity Security Review over the full M365 assessment?
Choose the Identity Security Review when identity and access are your main concern, or as a focused follow-up to a QuickScan. If mail, sharing, Intune and the rest of the surface should be covered too, the full M365 assessment is the right choice.
Will the review disrupt operations?
No. All data collection is read-only via Microsoft Graph and PowerShell — nothing is changed in your environment.
What does an Identity Security Review cost — and why isn't the price listed here?
Because no two companies — or system landscapes — are alike, and a fixed price list would be either too high for some or too vague for all. Instead, we always start with a free, no-obligation pre-analysis. After that you usually get a fixed price with no surprises — and where a fixed price isn’t possible, an estimate we stand behind and keep.
Ready to have your security verified by an independent third party?
A free, no-obligation pre-analysis. A fixed price. A concrete plan you can act on right away.
Get a free pre-analysis