Kits¶
One kit per job. Each starts with a free Top 5 (Top 10 for Microsoft 365 hardening) and grows into a Complete kit you can run as a project.
AI security¶
M365 Copilot Readiness Kit¶
Fix oversharing before Copilot finds it, then roll Copilot out with Purview guardrails.
M365 AI Agent Hardening Kit¶
Inventory, guardrails and accountable owners for Copilot Studio agents and Entra agent identities.
Identity¶
Conditional Access Baseline Kit¶
A Conditional Access baseline with phishing-resistant MFA for admins and no legacy sign-in paths.
Privileged Access and PIM Kit¶
Fewer standing admins: eligible roles in PIM, strict Tier 0 settings and quarterly reviews.
Entra SMS MFA Exit Kit¶
Get phone-only users to passkeys before Microsoft's SMS and voice MFA retires on 1 February 2027.
Email¶
Exchange Online Protection Kit¶
Preset policies, SPF, DKIM and DMARC to p=reject, no silent forwarding, and Defender for Office 365 set up properly.
Endpoint¶
Defender for Endpoint and ASR Kit¶
Every device onboarded, tamper protection on, and ASR rules moved from Audit to Block without outages.
Whole tenant¶
M365 Hardening Kit¶
A first pass across the whole tenant: Entra ID, Exchange Online, Teams, SharePoint, OneDrive and Purview.
Bundles¶
Two bundles are on the way: the AI and Identity Pack and the Microsoft 365 Hardening Library. See the bundles.