01Entra ID, Active Directory & identities
Entra ID, Conditional Access, privileged access and the sharp edges of hybrid environments. The usual starting point is dozens of policies, written at different times for different reasons, that nobody dares delete. We do the work few people want to do: bringing old service accounts and permissions under management.
Keywords: Entra · IAM · Conditional Access
02Microsoft 365 & Azure
Microsoft 365 and Azure hardened so the settings hold up to both an audit and everyday use. We go through the environment against the CIS Benchmark and Secure Score, and tell you which findings actually mean something in your environment. Most often the first thing to fix is E5 protection that was never switched on.
Keywords: CIS Benchmark · Secure Score · Azure Policy
03Intune & endpoint management
Intune and application control. Application control is the single most effective protection for an endpoint, and also the one most organisations leave undone. We have built allowlists with AppLocker and App Control for Business, and whole desktop platforms for thousands of users.
Keywords: Intune · App Control · Autopilot
04Microsoft Sentinel & Defender XDR
Detection that produces alerts someone has time to act on. We always start from what is collected and what is actually needed, because Sentinel bills for the data it ingests whether or not anyone looks at it. We build the monitoring, and help with SOC processes and automation.
Keywords: SIEM · SOAR · Defender XDR
05Microsoft Purview
Classification, data loss prevention (DLP) and retention set up to steer behaviour rather than just produce reports. We start from what data exists and who can reach it, because you cannot target protection at data that has not been classified.
Keywords: DLP · Sensitivity Labels · Data Governance
06AI agents, governance & compliance
AI agents and AI-enhanced agents call for a new kind of governance. We built our first governance models for non-human identities before anyone called them agents. Whether it is Agent 365, Foundry-based agents or Power Platform security, we can help.
Keywords: Agent 365 · Copilot Studio · Foundry