Overview
If your business uses Microsoft 365 (Office 365) and Windows devices, we’ll carry out a free, practical cyber security review to help you understand your current risk, and what to improve first. You’ll receive a clear summary of findings and recommended actions in plain English. There’s no obligation and it’s 100% free.
Why we’re offering this:
Cyber Essentials Plus Certified Feb 2026 Most cyber incidents we see start with common, fixable gaps in Microsoft 365 and device security—things like weak MFA setup, misconfigured policies, unmanaged devices, and missed patching. We’re offering this free review to give you a clear baseline and a prioritised plan to improve security without guesswork.
It’s free because we’re looking to build relationships with organisations we can help longer term. There’s no obligation—use the findings internally, with your current IT partner, or with us if you choose.
What’s included in the free review:
Your free cyber security review includes:
1) Microsoft 365 Security Snapshot
We run a structured security snapshot of your Microsoft 365 tenant, using a standardised assessment report to identify common gaps and misconfigurations and highlight improvement opportunities.
2) Guided cyber security questionnaire (with you)
We schedule a call and work through a cyber security questionnaire together. This helps us understand what’s in place today and where risks might be hiding - across people, process, and technology. This covers areas such as:
- User accounts, access, and authentication (e.g., MFA approach)
- Device security and management for Windows and mobile
- Email security and data protection
- Policies and compliance basics
- Backup and recovery readiness
- Staff awareness and training
- Patch management and vulnerability handling
- Monitoring, incident response, and supplier risk basics
3) Vulnerability scanning (Qualys)
To add real technical evidence, we can provide:
- Up to 25 temporary licences for the Qualys vulnerability scanner
- Vulnerability scanning coverage for:
- Up to 25 endpoints (if applicable to your environment), and/or
- Up to 5 public IPs for external vulnerability scanning
4) Review meeting with findings and next steps
We then hold a review meeting to walk you through:- What we found (and what it means)
- What to fix first (prioritised)
- Quick wins vs longer-term improvements
- Recommended next steps (whether you do them with us or not)
What you’ll get at the end:
By the end of the review you’ll have:
- A clear summary of your Microsoft 365 & Windows security posture
- Key gaps and priorities explained in plain English
- Practical next steps you can action internally (or with our help if you choose)
What we’ll need from you:
To run the review, we’ll ask for:- A contact for a short questionnaire call (IT lead or decision-maker)
- Permission to run the Microsoft 365 security snapshot
- Agreement on the endpoints/IPs to include for vulnerability scanning