Cybersecurity · Microsoft 365 · Active Directory

See your risks.
Prioritize the right actions.

An independent, pragmatic assessment of your Microsoft environment that turns security gaps into a clear, achievable roadmap aligned with your operations.

14+years in IT
Independentsenior external perspective
Actionablepriorities and owners
FR / ENbilingual delivery

01 — Scope

Two environments.
One attack surface.

The final scope is tailored to your architecture, priorities and existing controls. Both tracks can be delivered together or separately.

01Assessment

Microsoft 365 assessment

A structured review of identities, access, data sharing and detection controls to reduce the most likely risks.

  • Entra ID, MFA and Conditional Access
  • Privileged roles, PIM and emergency accounts
  • Enterprise applications, OAuth and consent
  • Exchange Online, anti-phishing and email authentication
  • SharePoint, OneDrive and external sharing
  • Microsoft Defender, logging and incident readiness
Explore the Microsoft 365 assessment →
Guides for this serviceMicrosoft Graph PowerShell: 12 commands for users and licenses →Exchange Online: 10 PowerShell commands to troubleshoot email →Microsoft 365: 15 PowerShell commands to check security →Microsoft 365: backup, retention, and legal hold explained →Microsoft Purview DLP: start with useful policies without blocking work →Microsoft Defender: investigate an alert without unnecessary device isolation →Microsoft Entra Token Protection: reduce stolen token replay →Microsoft 365: detect and remove suspicious email forwarding →Microsoft Defender: manage antivirus exclusions without weakening security →Secure vendor remote access with MFA, Conditional Access, and Cisco →Employee offboarding: secure Microsoft 365 without losing data →Microsoft 365 email going to junk: how to find the cause →Compromised Microsoft 365 account: a first-response guide →Microsoft Secure Score: which recommendations should you fix first? →Microsoft 365 OAuth apps: audit consent and Microsoft Graph permissions →Before Copilot: audit SharePoint, Teams and OneDrive permissions →Conditional Access: move from report-only to enforced without locking out users →Windows Hello for Business and Cloud Kerberos Trust: hybrid deployment guide →Exchange Server SE: migrate from 2016 or 2019 without breaking hybrid →Secure Microsoft 365 admin workstations with Conditional Access and PIM →
Show more (9)
02Assessment

Active Directory assessment

An analysis of domain security posture, attack paths and legacy dependencies that may expose privileged accounts.

  • Privileged groups, Tier 0 and delegation
  • Stale accounts, service accounts and gMSA
  • Kerberos, NTLM, LDAP, SMB and legacy protocols
  • GPOs, domain controllers and operational hygiene
  • AD CS and attack paths, when present
  • Defender for Identity coverage and detection capability
Explore the Active Directory assessment →
Guides for this serviceEnterprise DNS: troubleshoot intermittent name resolution →Migrate a Windows Server 2016 domain controller to 2025 →LDAP signing and channel binding: secure Active Directory without outages →Secure Active Directory service accounts: gMSA, SPNs and delegation →Restore Active Directory after a cyberattack: build a forest recovery plan →Windows Hello for Business and Cloud Kerberos Trust: hybrid deployment guide →Deploy Windows LAPS in a hybrid Active Directory and Microsoft Entra ID environment →Windows Server 2016 is nearing end of support: build a realistic migration plan →Secure Active Directory Certificate Services: detect ESC1, ESC4, ESC6 and ESC8 →Stale MDE devices: cleanup with PowerShell and the API →Migrate Microsoft Defender for Identity to v3.x sensors: a practical guide →SMB hardening with Windows 11 24H2 and Windows Server 2025: a deployment guide →Kerberos and RC4 in 2026: audit Active Directory and migrate to AES without outages →Active Directory security: 10 checks to prioritize →

Please note: this is a posture and configuration assessment. Penetration testing or breach simulation is included only when explicitly defined in the engagement.

02 — Method

A rigorous approach,
without disrupting operations.

The analysis combines observed configurations, business context and Microsoft-recommended practices. Findings are validated before presentation.

  1. 01

    Scoping

    Objectives, context, boundaries and required access are confirmed before any collection.

  2. 02

    Controlled collection

    Temporary, read-only access is preferred, with targeted collection of relevant configurations.

  3. 03

    Risk analysis

    Findings are validated, contextualized and ranked by impact and exploitability.

  4. 04

    Readout

    Results presentation, prioritized roadmap and technical discussion with your teams.

03 — Deliverables

More than a score.
A path forward.

Each recommendation is grounded in your technical reality so the team can decide, plan and act.

01

Executive summary

A clear view of the current posture and the risks that require a management decision.

02

Technical report

Documented findings, evidence, impact, recommendations and configuration references.

03

Remediation roadmap

Actions ranked by priority, complexity and dependencies to guide the next 30, 60 and 90 days.

04

Findings workshop

A session with technical teams and decision-makers to validate the next steps.

04 — Confidentiality

Your data stays
under control.

Least privilege guides every access request.

Temporary and read-only access is preferred whenever possible.

Exports are limited to what is necessary, and their handling is agreed during scoping.

A confidentiality agreement can govern the engagement.

Next step

Want to know where
to act first?

Briefly describe your environment and what prompted the assessment. I’ll reply with the first useful questions to define a relevant scope.

Request an exploratory call→