Published, in full
What a Microsoft 365 security assessment costs
Two options, published before you speak to anyone: a one-off hardening exercise or ongoing posture monitoring. Both run on our purpose-built platform with every finding reviewed by a senior analyst against CIS and wider best practice, and both deliver in days. No quote theatre.
One-Off Hardening Exercise
The full tenant, reviewed in days
£2,340
one-off, fixed, ex VAT
- Full-stack review: Entra ID, Conditional Access, Exchange, SharePoint, Teams, Intune, Defender, audit logging
- Automated sweep by our in-house platform, then senior analyst review of every finding
- CIS-benchmarked, with Cyber Essentials, NIST and ISO 27001 practice applied where it fits
- Prioritised remediation roadmap and debrief, delivered in days
- One remediation re-test included
Most chosen
Ongoing Posture Monitoring
Quarterly reviews that record what changed
£580
per month, ex VAT
- A full review every quarter, same platform-plus-analyst method
- Configuration drift tracked between quarters, every change recorded against your baseline
- New risks called out as they appear, not at year end
- Quarterly report and priorities call with your consultant
- Re-tests as fixes land, all year round
Assumptions, stated plainly
Prices are per tenant, exclude VAT and include scoping, the hardening exercise, the report, the debrief and one remediation re-test. Additional tenants are £920 each on a one-off hardening exercise and £75 per month each on monitoring. Read-only access is required; nothing is changed. The Azure estate is scoped and priced on the call, and unusually complex estates are quoted, said plainly rather than stretched into an option that does not fit.
The market, for comparison
What this work costs elsewhere
Most UK firms quote this work privately. Where public figures exist, they are day rates on the government's Digital Marketplace: Microsoft 365 assessment listings cluster between £850 and £1,250 per consultant day, with the common productised shape running three to four days. That implies a market price of roughly £2,550 to £5,000 for a comparable engagement, reached only after you ask.
Our view is simpler: the number you would eventually be quoted belongs on the page. And because our in-house platform does the collection work that consumes most of those consultant days, the full hardening exercise lands at £2,340 with results in days.
Free scans, plainly placed
Microsoft's Zero Trust assessment, CoreView's scanner and similar free tools compare your settings against a baseline in minutes, and if you want a quick temperature check they are a reasonable place to start. They do not interpret findings in your context, rank them by risk to your business, or help your team fix them in the right order. When the list arrives and the question becomes "which of these forty items matters?", that is the hardening exercise.
Our free-tools comparison, in depthQuick answers
Pricing questions, answered
Why publish prices when nobody else does?
Because the quote-only convention serves sellers, not buyers. A hardening exercise is a well-bounded piece of work: we know exactly what it takes, so you should know what it costs before the first conversation. The same policy runs across every CyPro specialist service.
How is it this fast?
Because the collection work is not manual. Our in-house platform sweeps the tenant's configuration far faster and more consistently than a consultant clicking through admin centres, which frees the analysts to spend their time on judgement: what each finding means for your business and what to fix first. That is how the roadmap lands in days rather than weeks, without the quality dropping.
What does an additional tenant cost?
£920 per additional tenant on a one-off hardening exercise, and £75 per month per additional tenant on ongoing posture monitoring. Group structures with several tenants get the same method on each, with the findings rolled up into one view.
Where does the Azure assessment fit?
Alongside either option, scoped and priced on the discovery call by the size of the Azure estate. The identity layer is assessed once and shared, which is why combining them costs less than two separate engagements.
How does this compare to a free assessment tool?
Free scanners are genuinely useful and we say so: they compare settings against a baseline in minutes. What they do not do is interpret findings for your business, rank them by real risk, walk your team through remediation or stand behind the result. Our platform does the sweeping; our analysts do exactly that interpretation.
What about annual reviews and re-tests?
A remediation re-test after your fixes is included with every hardening exercise at no charge. For staying current, ongoing posture monitoring replaces piecemeal annual reviews: a full review every quarter with the changes recorded, for £580 a month. If you would rather reassess ad hoc, a repeat one-off runs at the same published fee.
You already know the price
Confirm your service in one call
A free 45 minute scoping call confirms which workloads are in scope and books the hardening exercise at the published fee. No negotiation required, none attempted.