Is your Microsoft 365 tenant secure, or just switched on?
Most small business tenants are set up once and never checked again. Tick what's already true on the right, and see how many gaps you have in 30 seconds.
.\Quick-Check.ps1
Tick everything that's already true for your tenant:
Each open line is a gap attackers use every day. The free checklist covers these and 17 more, with what to fix first.
25 checks, 2 to 3 hours, free.
The Microsoft 365 Security Checklist walks through every area attackers go after in a small business tenant. Each check is marked Essential or Recommended, so you know what to fix this week and what can wait a month.
Written in plain English for owners, office managers and the IT people who support them.
- Accounts and sign-in6 checksMFA for everyone, fewer Global Admins, an emergency account.
- Email protection6 checksStop your domain being spoofed and your mail being copied out.
- Devices4 checksUpdates, encryption, and no everyday admin rights.
- Files and backup5 checksReal backups, safer sharing links, and guests who still belong.
- Monitoring and staff4 checksLogs you can investigate, alerts someone reads, staff who report phishing.
The kit does the checking for you.
Four PowerShell scripts audit a tenant in minutes and export clean CSV reports. A setup guide then walks through every fix, and a report template turns the results into something you can hand to a client or business owner.
Every script is read-only. Nothing in the tenant changes until you decide to change it.
M365-Security-Kit/ ├── Get-MfaStatusReport.ps1 │ who has MFA, who relies on SMS only ├── Get-ForwardingRulesReport.ps1 │ mail quietly leaving the business ├── Get-AdminRolesReport.ps1 │ too many admins, stale admins ├── Get-SharingReport.ps1 │ "Anyone" links, guests who never left ├── Setup-Guide.pdf │ all 25 fixes, step by step └── Security-Report-Template.docx your findings, ready for a client
Built by someone who does this for a living.
Read-only first
You see the full picture before anything changes. No script touches your settings.
Plain English
Written for the person who has to do the work on a Tuesday evening, not for an auditor.
Small business budgets
Works on Business Basic and Standard. Fixes that need Business Premium are clearly marked.