Identity & access (Entra ID)
Multi-factor authentication, Conditional Access, privileged role management and lifecycle automation for joiners, movers and leavers.
- MFA & passwordless rollout
- Conditional Access policy design
- Admin role hardening & PIM
Microsoft 365 tenant management
Your Microsoft 365, secured and managed by specialists.
Most tenants run with default settings, shared admin accounts and licences nobody uses. We harden your environment, keep it compliant and manage it day to day, so your team can focus on the business.
What we manage
Complete coverage of your Microsoft 365 estate.
From identity to endpoints, we apply Microsoft’s recommended baselines and keep them enforced as your organisation changes.
Device management (Intune)
Enrol and secure Windows, macOS, iOS and Android devices with compliance policies, app deployment and remote wipe.
- Autopilot & zero-touch setup
- Compliance & configuration profiles
- App protection for BYOD
Threat protection (Defender)
Defender for Office 365 and Endpoint configured to block phishing, malware and ransomware, with alerts monitored and actioned.
- Safe Links & Safe Attachments
- Anti-phishing & impersonation rules
- Endpoint detection & response
Exchange, Teams & SharePoint
Mail flow, DKIM/DMARC, shared mailboxes, Teams governance and SharePoint/OneDrive sharing policies configured for security and productivity.
- SPF, DKIM & DMARC enforcement
- External sharing & guest controls
- Retention & litigation hold
Migration & tenant setup
Move from Google Workspace, on-premises Exchange or another tenant with zero data loss, or set up a brand-new tenant the right way from day one.
- Mailbox, file & Teams migration
- Tenant-to-tenant consolidation
- Domain, DNS & hybrid identity
Licensing & reporting
Right-size licences, remove waste, and receive a monthly report covering Secure Score, incidents, changes and recommendations.
- Licence audit & optimisation
- Monthly health & security report
- Backup & recovery verification
Onboarding
How we take over a tenant, safely.
Whether your tenant was set up years ago or last week, we follow the same careful, documented process. Nothing changes without your approval.
- 1. Security baseline auditRead-only assessment against Microsoft and CIS benchmarks. You receive your Secure Score, the risks found and a prioritised fix list.
- 2. Remediation planWe agree on what to fix first, the change windows and how users will be communicated with.
- 3. Hardening sprintMFA, Conditional Access, Defender policies, sharing controls and admin role clean-up rolled out in stages with rollback plans.
- 4. Managed operationsDay-to-day administration, monitoring, user support for admins and a monthly report, with a named engineer you can reach.
Plans
Choose the level of support you need.
Plans are priced per user per month after a free baseline review. Project work such as migrations is quoted separately at a fixed price.
Secure
One-off hardening for tenants that need to be brought up to standard.
Fixed-price project · 2–4 weeks
- Full security baseline audit
- MFA & Conditional Access rollout
- Defender & mail authentication setup
- Admin role & sharing clean-up
- Handover documentation
Recommended
Managed
Ongoing administration and security for organisations without an in-house M365 admin.
Per user / month · 30 days notice
- Everything in Secure
- User, licence & device administration
- Intune device management
- Alert monitoring & response
- Monthly health & security report
- Next-business-day support
Managed Plus
For regulated or larger organisations with compliance and automation needs.
Per user / month · annual agreement
- Everything in Managed
- Purview data protection & DLP
- Compliance reporting (ISO, SOC 2, NDPR/GDPR)
- Power Automate & identity automation
- Quarterly strategy reviews
- Priority same-day support
FAQ
Microsoft 365 questions.
We already have an IT person. Why do we need this?
Microsoft 365 changes every month and secure configuration is a specialism. We work alongside your IT staff, take ownership of the tenant’s security posture, and free them up for day-to-day support.
Will enforcing MFA disrupt our users?
Not when it is rolled out properly. We stage the rollout by group, send clear instructions, provide a registration window and support users through it. Most organisations complete it within two weeks with minimal tickets.
Do you need Global Administrator access?
The audit is read-only. For managed services we use named, MFA-protected accounts with just-in-time privileged access through Privileged Identity Management, and every change is logged. You retain your own break-glass Global Admin accounts.
Can you help us buy or reduce licences?
Yes. We audit current usage, remove unassigned or duplicate licences and recommend the most cost-effective mix of Business and Enterprise plans for your needs.
Is Microsoft 365 backed up automatically?
Microsoft provides resilience, not point-in-time backup of your data. We configure retention policies and, where needed, a third-party backup so accidental deletion or ransomware does not become permanent loss.
Find out how secure your tenant really is.
Book a free Microsoft 365 security baseline review. You will receive your Secure Score, the top risks we find and a prioritised fix list.