Know where your Microsoft 365 security stands, and what to fix first.
Independent, read-only assessments for businesses that run on Microsoft 365. Fixed price, published up front. A report your insurer, your IT vendor, and your leadership can each act on.
Who this is for
Any business that runs on Microsoft 365 and holds data someone else expects it to protect. Most have no IT department of their own, a vendor who keeps things running, and nobody who has ever read the whole tenant configuration. The three situations below are what usually start the conversation.
The insurance renewal landed
The questionnaire asks about MFA, backups, and admin accounts, and nobody at the firm is sure of the answers.
A client or regulator wants proof
Someone asked for evidence of controls, and nobody can point to a document that shows them.
Staff are already using AI tools
Client files are going into Copilot or ChatGPT with no policy, and a partner just found out.
Three fixed-scope packages
Published prices, so you know the number before we talk. Over 50 users is quoted after a short scoping call.
$1,500 up to 25 users · $2,500 for 26 to 50
A read-only review of identity, mail security, sharing, logging, backup coverage, and device compliance, scored against Microsoft Secure Score.
- Scored report with exact fixes
- Prioritized fix list for your IT vendor
- Cyber insurance questionnaire answers
$2,000 any size up to 50 users
Where client data can leak into AI tools: SharePoint and OneDrive oversharing, labels, DLP, Copilot posture, and what staff are actually using.
- Oversharing report
- Copilot go or no-go checklist
- AI acceptable use policy, ready for the firm to adopt
Full Assessment plus 30-day recheck
$3,500 up to 25 users · $4,500 for 26 to 50
Both assessments in one combined report, then a 30-day follow-up to confirm the fixes landed. Same price as buying 1 and 2 separately; the recheck is what you gain.
- Everything in both packages
- Before and after Secure Score scorecard
- Something to show an insurer or client
Remediation is separate, at $150 per hour, or handed to your existing IT vendor with a written scope. Keeping it separate is what makes the assessment independent. Full package details
How an engagement runs
- Book a 20-minute call.
Confirm firm size, licensing, and which package fits. No pitch.
- Proposal and statement of work, same day.
Scope, price, dates, and the authorization language, signed electronically. 50% deposit schedules the work.
- Read-only access.
Your admin creates one Global Reader account with MFA. ValorOps never holds a Global Administrator credential.
- Assessment over the stated business days.
Staff interviews, where included, are 30 minutes each and remote.
- Findings walkthrough and report.
A 45-minute call with the partner or practice manager. Report delivered the same day, access revoked, confirmation sent.
What stays in your control
- Nothing in the tenant is changed during an assessment. Every finding comes with the fix; you or your vendor decide when to make it.
- Access is one dedicated read-only account that you create and you revoke. Its sign-ins and activity show in your own tenant logs, and you receive written confirmation when access ends.
- Client data is not exported. Configuration, policies, and settings are reviewed; file and message contents are not.
- The report is yours. Share it with your insurer, your IT vendor, or a regulator without asking.
Dillan Valor
Years of hands-on work across Microsoft 365, Entra, Defender, Intune, and Azure in dozens of small-business tenants, handling the problems that get escalated when the first line cannot solve them. ValorOps applies that experience to one tenant at a time, with the assessment priced separately from any fix so the findings stay independent.
Before that, 10 years as a LAN administrator for the U.S. Navy submarine force. Based in Ringgold, Georgia; on site in Chattanooga and North Georgia, remote anywhere.
- CompTIA Security+
- CompTIA A+
- LPI Linux Essentials
- Juniper JNCIA
- ITIL 4 Foundation
- Veteran-owned