For IT Managers and Sysadmins
Fixed-scope engagements that harden Copilot, Entra ID, Intune, Defender, Microsoft 365, and Exchange Online. Policies and configurations are live at engagement close.
Fixed-price, one-day remote engagement reviewing M365, identity, email, and endpoint posture. Deliverable: prioritized findings report.
Identity & Access - Find gaps in your Entra ID tenant security before an attacker does.
Entra ID security hardening: Full tenant review, roles, legacy auth, PIM. Assessment + findings report. Fixed-scope M365 security.
Duration: 2-3 weeks Price: $3,500 – $6,500
Identity & Access - A CA policy framework designed, deployed, and tested based on your organization's needs.
Conditional Access architecture: Design and deploy CA policy framework. Device compliance, risk-based, location policies. M365 security sprint.
Duration: 2–4 weeks Price: $3,500-$8,500
Identity & Access - Organization-wide MFA enforced — or upgraded from SMS to phishing-resistant methods.
MFA deployment sprint: Org-wide rollout. FIDO2, Microsoft Authenticator phishing-resistant. Weak methods eliminated. Fixed-price M365 security.
Duration: 2–4 weeks Price: $4,000-$7,500
Identity & Access - Eliminate standing admin accounts. Just-in-time access for every privileged role.
PIM sprint: Just-in-time access for privileged Entra roles. Eliminate standing admin accounts. Approval workflows, access reviews. M365 security.
Duration: 2–3 weeks Price: $4,500-$7,000
Endpoint & Device Management - Microsoft and CIS security baselines deployed across every managed device.
Intune security baseline: Deploy Microsoft & CIS benchmarks. Windows/mobile compliance policies. Automated remediation. M365 endpoint security.
Duration: 2–4 weeks Price: $4,500-$7,500
Endpoint & Device Management - New devices that provision themselves. Zero IT touch required.
Intune zero-touch enrollment: Autopilot + Intune. Auto-provisioning, app deployment, profiles. No IT touch required.
Duration: 2–3 weeks Price: $6,500-$10,000