Find the gaps in your Microsoft 365 tenant and email domain before someone else does
We benchmark key Microsoft 365 controls and review the records that help protect your email domain. You receive a clear score, plain-English findings and a practical order of work.
One review of the systems people rely on every day
The tenant review looks at Microsoft 365 configuration. The domain review checks whether the public records that protect your email are in place and working as expected.
Microsoft 365 tenant review
Key controls are benchmarked against CIS Microsoft 365 Foundations Benchmark Level 1, then interpreted in the context of how your business works.
- Entra identity, MFA and Conditional Access
- Defender for Office 365 and Exchange controls
- Intune, device registration and endpoint compliance
- SharePoint, Teams, Purview and data-sharing settings
Email domain security review
Your public domain records are checked to show whether email authentication and transport protections are correctly configured.
- DMARC, SPF and DKIM
- MTA-STS and TLS-RPT
- BIMI and DNSSEC where relevant
- Clear explanation of any gaps or warnings
More than a list of technical settings
You receive an executive summary showing the overall position, a category breakdown, passed and failed controls, the reason each finding matters, and a practical recommendation for what to do next.
We discuss the findings with you in plain English so you can decide what is urgent, what is worth planning and what is already in good shape.
A quick view of the current tenant and domain security position.
Passed and failed controls grouped into a sensible order of work.
A clear explanation of the risk, not just a technical control name.
A roadmap your team or Fortress can use to make improvements.
The domain check can start straight away. The tenant review uses the right level of access.
Domain checks use publicly available DNS records. For Microsoft 365, we agree appropriate read-only access through secure Microsoft sign-in where required. You should never need to share passwords with us.
A benchmark and practical review, not a certificate with no follow-through
The review gives you a useful security baseline and makes configuration gaps visible. It is not a certification, a guarantee that every risk has been removed, or a replacement for understanding how your business actually uses Microsoft 365.
We use the report as the start of a sensible conversation about the controls that matter most to your people, customers and operation.
Will this interrupt our users?
No. The assessment is designed to review configuration and public domain records. Any changes are discussed, planned and agreed separately.
Can we use the report with our existing IT provider?
Yes. You can use it as a second opinion, a roadmap for your current provider or the starting point for Fortress to carry out the work.
What happens after the review?
We explain the findings, agree priorities and help you decide whether to fix the work internally, through your current provider or with Fortress.
Request your Microsoft 365 & Domain Security Review.
Get a clearer view of the controls you have, the gaps worth addressing and the next step that makes sense for your business.