SIMIRIKIASSESSMENT GUIDE
A clearer starting point for your Microsoft 365 security posture.
What the free read-only assessment checks, what you receive, how your data is handled and how to scope the next step.
What you get from the free assessment
Prioritized configuration findings, supporting observations, the number of controls actually evaluated and the checks still pending. Save a concise assessment brief for your IT review. The score applies only to evaluated controls; it is not a security clearance.
What it checks—and where coverage ends
The web assessment selects 155 Microsoft Graph controls from the existing catalog. They cover areas such as identity, application permissions, Teams and governance, subject to available evidence. It also reads public email-authentication DNS records for verified domains. Selected controls are not 155 guaranteed automated detections: some require additional context or manual review. Azure resource controls are outside this web scan. It is not a complete Defender, endpoint-antivirus or entire Microsoft ecosystem assessment, a penetration test or a compliance certification.
What happens when you connect
Use your Microsoft work or school account on Microsoft’s sign-in page. Review the requested read-only access, confirm the detected organization and explicitly start the assessment. Available coverage depends on the account’s permissions and roles. The scan does not change settings, install an agent or run remediation.
Understand data handling before signing in
This pilot processes assessments on Simiriki’s current Windows computer. Microsoft provides sign-in and configuration APIs; Cloudflare carries public website traffic. Findings can contain identifiable account or resource metadata. New results stay in server memory only for the website session; the scanner does not write new report files. End the session to clear its server state, or it expires after 20 minutes. Save a detailed report or prepare an email summary before ending. Your browser/download/email copies remain under your control. Older pilot evidence is preserved for separate review. Read the assessment data notice before connecting; ask us about retention if your organization requires a specific policy.
Turn a finding into a decision
Review the highest-priority observation, confirm the affected scope and business context, and distinguish an observed configuration gap from a pending check. Use the evidence and recommended next action to decide what your administrator should investigate. An inconclusive check is not a pass or a confirmed vulnerability.
What comes after the free scan
Simiriki Assessment is the free read-only product. Prepare a selected review pack for the separate Simiriki Remediation product. This preview prepares plans; it does not apply changes. Findings reviewed in business context, with coverage and evidence gaps listed. A prioritized administrator configuration plan with owners, prerequisites, impact and recovery steps. An agreed verification approach for supported changes you authorize separately. Use your saved review pack to agree the exact scope with an authorized administrator. Share only the details you choose. Paid execution is not active in this pilot. Confirm scope, price, responsibilities and administrator permissions separately. Preparing a plan authorizes no tenant changes. Agree products, access and retention in scope. The current website does not apply changes or take payment.
Reach a person
Contact Jairo at hola@simiriki.com to discuss fit, assessment access or next-step scope. Include your organization and the question you want to resolve. Do not email passwords, access tokens or raw account exports. Save your report before ending the session. Include its review reference to connect your request, and share the saved report only if you choose after confirming the reviewer and scope. The reference cannot retrieve a new session-only report.
Read the assessment data notice
Scan Microsoft 365