Before you connect Microsoft 365

Understand your Microsoft 365 security posture through supported configuration checks. See prioritized findings, supporting observations and checks that remain pending. Use the evidence to prepare a focused review with your administrator and decide what to investigate next.

A read-only assessment with prioritized results, evidence and explicit coverage limits. Save a detailed offline HTML report or a concise text brief before ending the session. The score applies only to evaluated controls. No card, payment or subscription is required.

The web assessment selects 155 Microsoft Graph controls from the existing 201-control catalog. Selection is not a promise of 155 completed detections: available evidence determines which checks reach a result; others stay pending. It also reads public email-authentication DNS records for verified domains. Azure resource controls are outside this web scan. This is configuration triage, not a complete Microsoft ecosystem, Defender or endpoint-antivirus assessment.

Use an authorized Microsoft work or school account on Microsoft’s sign-in page. Review the requested read-only access, confirm the detected organization and explicitly start the assessment. Coverage depends on the account’s roles, permissions, licensing and available sources. An unavailable read stays pending rather than being treated as passed.

The current assessment keeps Microsoft access read-only. “Help me with this” prepares a plain-language administrator-review plan. Saving or reviewing a plan does not apply a change or verify a fix. Any later implementation needs separately authorized scope and access, with a reviewed impact, recovery and verification plan.

This pilot processes assessments on Simiriki’s current Windows computer. Microsoft supplies sign-in and configuration APIs; Cloudflare carries public website traffic. Findings can contain identifiable account or resource metadata. New tokens and results stay in server-session memory; new free scans do not create report files. End the session to clear server state, or it expires after 20 minutes. Earlier pilot evidence is preserved separately. The assessment data notice explains provider, operating-system and retention limits.

Save your detailed report or brief before ending the session. Prepare an email summary in your own mail app, choose the recipient and attach the report if you decide to share it. Simiriki sends no automatic email and keeps no new server-side report for later retrieval. Browser, download and email copies remain under your control. Keep passwords and access tokens private.

A finding records an observed configuration signal within the stated coverage. Business purpose, equivalent protections and missing evidence may need administrator review. A pending check is neither a pass nor a confirmed vulnerability. The assessment is not a penetration test or compliance certification. Partial control mappings do not establish complete benchmark conformance or legal compliance.

Simiriki is a Microsoft Partner (Partner ID 6972092). Microsoft provides the security capabilities. Simiriki helps you assess supported settings, understand evidence and prepare an administrator review. Microsoft Partner membership is separate from product certification or Microsoft endorsement. The pilot does not claim Microsoft certification; any partner badge requires its own eligible, authorized use.

Request a scoped review, a fuller assessment or assisted configuration. First agree the products and controls, access, retention, deliverables, commercial terms and any implementation authorization. Contact Jairo at hola@simiriki.com to discuss fit and the next step. The current website does not apply changes or take payment.