ID
Identity and access
We look for issues involving administrator permissions, multi-factor authentication, user access and Conditional Access controls.
FREE MICROSOFT 365 SECURITY AUDIT
Find the security gaps hiding in your Microsoft 365 tenant
Microsoft 365 includes powerful security controls, but they only protect your organisation when they are configured correctly. Our free tenant security audit gives you a clear picture of your current security posture, including configuration gaps, unnecessary risks and protections you may already be paying for but not using.
You'll receive a practical report showing what needs attention and what to prioritise first.
Free and without obligation. Read-only access for seven days. We cannot change your Microsoft 365 settings.
130+ five-star Google reviews THE HONEST QUESTION
Do you know how securely your Microsoft 365 tenant is configured?
Having Microsoft 365 does not automatically mean every available security feature is active or correctly configured.
Multi-factor authentication may not cover every account. Administrators may have more access than they need. Email protection, Conditional Access, device security and data-protection controls may be incomplete or still using default settings.
These gaps are difficult to spot without examining the tenant itself.
The Keybridge Microsoft 365 Security Audit provides an evidence-based view of your configuration, without making any changes to your environment.
WHAT THE AUDIT EXAMINES
A practical assessment of your Microsoft 365 security
EM
Email and collaboration security
We assess the protections surrounding Exchange Online, Microsoft Teams and SharePoint, including common phishing, malware and unsafe-link controls.
DV
Devices and endpoint protection
Where applicable, we review the configuration of Microsoft Intune, device compliance and Microsoft Defender protections.
DP
Data protection and compliance
We identify gaps in areas such as data-loss prevention, information protection, sensitivity labels and access to sensitive information.
SB
Security baselines
Your tenant is assessed against recognised Microsoft 365 security practices to identify missing controls, configuration weaknesses and opportunities for improvement.
LU
Microsoft 365 licence utilisation
We highlight useful security capabilities that may already be included in your existing Microsoft licences but are not currently being used.
WHAT YOU RECEIVE
Your results, explained clearly
After completing the audit, you'll receive a security report covering everything on the right.
We'll talk you through the findings in plain English so you understand what matters, why it matters and what your options are.
The report is yours to keep, whether or not you decide to work with Keybridge.
- Your current Microsoft 365 security posture
- The most important risks and configuration gaps
- Areas where stronger controls are recommended
- Quick improvements that could reduce risk immediately
- Longer-term security priorities
- Microsoft 365 protections you may already be licensed to use
- Clear recommendations from the Keybridge team
HOW IT WORKS
A secure, straightforward process
Connect your tenant securely
Start the audit and sign in through Inforcer using your own Microsoft credentials. You do not send your password or login details to Keybridge. Someone with the appropriate Microsoft 365 administrator permissions will need to complete this step.
Approve temporary read-only access
You'll be shown the requested permissions before approving access. The connection provides read-only access for seven days. It allows us to assess your configuration but does not allow us to make changes to your Microsoft 365 environment.
We run the assessment
Keybridge uses Inforcer to assess the tenant's security configuration and identify gaps, risks and opportunities for improvement.
Receive your report
We prepare your security report and arrange a conversation to explain the findings, answer your questions and discuss the recommended priorities. There is no obligation to proceed with any further work.
Secure onboarding is provided through Inforcer.
YOU STAY IN CONTROL
Your Microsoft 365 environment remains under your control
We understand that granting access to your Microsoft 365 tenant is a significant decision. That is why the audit uses a controlled, time-limited process:
- You sign in directly with Microsoft
- Your password is not shared with Keybridge
- You see the requested permissions before approving them
- Access is read-only
- Keybridge cannot change your settings
- The connection is limited to seven days
- The audit does not interrupt your users or services
- There is no obligation to purchase anything
WHY KEYBRIDGE
Security expertise you can trust
We don't just produce a list of technical findings. We help you understand their business impact and decide what should happen next.
Keybridge supports more than 200 organisations and manages thousands of devices across the UK. Our team combines practical Microsoft 365 experience with recognised security credentials: ISO 27001:2022 certification, Cyber Essentials certification, Microsoft Solutions Partner status and more than 130 five-star Google reviews.
We have direct experience supporting organisations in recruitment, legal, accountancy, financial services and the charity sector.
Accreditations & Partnerships
ALREADY TALKING TO US?
Recently received a proposal from Keybridge?
If you are currently considering a Keybridge proposal, the audit gives both teams a clearer, evidence-based view of your Microsoft 365 environment. The audit is free and does not commit you to accepting our proposal.
- Security risks that need immediate attention
- Work that should be included in your onboarding plan
- Existing tools or protections that are not being used effectively
- Opportunities to simplify your current security setup
- The areas Keybridge should prioritise if you decide to move forward
Frequently asked questions
Is the audit really free?+
Yes. There is no charge for the Microsoft 365 Security Audit and no obligation to purchase services from Keybridge.
Will Keybridge be able to change our settings?+
No. The audit uses read-only access. We can inspect the relevant configuration, but we cannot make changes to your Microsoft 365 tenant.
Do I need to give Keybridge my password?+
No. You sign in directly through Microsoft using Inforcer's secure onboarding process. Your Microsoft password is not shared with Keybridge.
How long does Keybridge have access?+
The connection is provided for seven days, giving us enough time to run the assessment and prepare your report.
Will the audit affect our users?+
No. The assessment is read-only and should not interrupt your users, email or other Microsoft 365 services.
Who should complete the connection?+
The process must be completed by someone with the appropriate Microsoft 365 administrator permissions. If another IT provider manages your tenant, you may need to ask them to complete or assist with this step.
What will the report show?+
The report will highlight your current security posture, configuration gaps, significant risks and recommended improvements. We'll help you distinguish between immediate quick wins and longer-term priorities.
Is this a penetration test?+
No. This is a configuration and security-posture assessment of your Microsoft 365 tenant. It does not attempt to exploit your systems and should not be presented as a penetration test.
What happens after the audit?+
Keybridge will talk you through the findings and answer your questions. You can then decide whether to address the recommendations internally, through your existing provider or with Keybridge.
What if we already have an IT provider?+
That is not a problem. The audit can provide an independent view of your Microsoft 365 security configuration and help you ask informed questions of your current provider.
Get a clearer view of your Microsoft 365 security
Find out where your organisation is well protected, where gaps exist and what you should prioritise next. The audit is free, read-only and without obligation.
You will be transferred to Inforcer to complete the secure Microsoft 365 connection.
By starting the audit, you will be transferred to Inforcer's secure onboarding service and asked to authenticate directly with Microsoft. Please review the permissions displayed by Microsoft before approving access.
Keybridge privacy notice · Inforcer privacy notice · Contact Keybridge