Microsoft 365 is not a product you deploy once and leave. It is a living ecosystem that Microsoft keeps updating and changing, and its security and efficiency depend on the current configuration. Our role is to keep the environment aligned with best practice, raise its security level measurably and plan its development deliberately - so that licence costs turn into real value.
Our work rests on three pillars: maintenance and hygiene of the environment, objectively measured security (CIS Microsoft 365 Foundations, CISA/SCuBA guidance, Microsoft Secure Score and over 300 automated checks with Maester) and growth with licence optimisation. Our reports are written for both the IT team and management.
Ongoing tenant administration, first-line helpdesk and data backup
Conditional Access and phishing-resistant MFA (FIDO2, passkeys)
Intune: laptop and phone management, compliance policies
Microsoft Defender configuration and tuning, Purview information protection
Security measurement: Maester, Secure Score, CIS and CISA/SCuBA
CSP licensing and licence cost optimisation
Packages
Three subscription care packages
Packages sit on top of the licences you already own: higher packages depend on your Microsoft 365 licence level. Billed monthly per user - we prepare rates in an individual quote.
01
FOUNDATION
Maintenance and hygiene
Licences
Business Basic, Standard, F1/F3
Model
Subscription, per user
Price
Individual quote
For whom
Companies on Business Basic or Business Standard (and Frontline) licences that need ongoing administration, backup and order in their licences.
Scope
Support and administrationFirst-line support within an SLA and ongoing tenant administration.
BackupMicrosoft 365 data backup (e.g. Synology ActiveBackup, Nakivo, Veeam).
Licences and reportsLicence optimisation and audit, monthly licence and incident report.
User accountsBasic onboarding, offboarding and role-change procedure.
Mail and domainsBasic hygiene: SPF, DKIM and DMARC.
Good to know
Business Basic and Standard licences do not allow Conditional Access or phishing-resistant MFA. We show what a licence upgrade would unlock before you change anything.
What we deliver in each package. Part of the scope depends on your licence level.
Scope
FOUNDATION
PROTECTION
GROWTH
First-line support (SLA)
✓
✓
✓
Ongoing tenant administration
✓
✓
✓
Microsoft 365 data backup
✓
✓
✓
Monthly report (licences, incidents)
✓
✓
✓
Licence optimisation and audit
✓
✓
✓
Account management (onboarding, offboarding, role change)
basic
full
full
Conditional Access and MFA
-
✓
✓
Device management (Intune)
-
✓
✓
Microsoft Defender configuration and tuning
-
✓
✓
Configuration review (Maester, Secure Score)
-
✓
✓
Information protection (Purview: DLP, labels, retention)
-
basic
advanced
Identity protection, PIM, access reviews
-
-
✓
Phishing simulations and training (Attack Simulator)
-
-
✓
SharePoint and Teams governance, Copilot readiness
-
-
✓
IT roadmap and licence budgeting
optional
optional
✓
✓ included · - not available at this level
Licences
What we can do with your licences
The scope of services depends on the licence level you have today. For each level we show what we can do now and what an upgrade would unlock.
Business Basic and Business Standard
Mail, Teams, SharePoint, OneDrive and Office apps (Basic: web and mobile, Standard: also desktop). Protection comes only from basic mail protection (EOP) and simplified Security Defaults.
FOUNDATION package: first-line support and administration, backup, licence optimisation and account clean-up, mail and domain hygiene (SPF, DKIM, DMARC).
Limitation: Conditional Access and phishing-resistant MFA cannot be deployed at this level.
Business Premium
Full desktop Office, SMB licences (up to 300 users). Includes Entra ID P1 (Conditional Access, MFA, SSPR), Intune, Defender for Business, Defender for Office 365 P1 and basic information protection.
PROTECTION package: Conditional Access and phishing-resistant MFA (FIDO2, passkeys), legacy auth removal, Intune, Defender tuning, monthly Maester and Secure Score reports, labels and DLP, incident response (account takeover, BEC).
Frontline F1 and F3
Licences for frontline workers without a fixed workstation (manufacturing, retail, logistics). F1: Entra ID P1 identity, limited Teams and SharePoint, kiosk mode. F3: additionally web and mobile editing, 2 GB mailbox, Intune Plan 1 and Defender for Endpoint P1.
FOUNDATION and PROTECTION packages: identity and conditional access for frontline workers, shared device mode, Intune and compliance policies (F3), Teams Shifts and Planner.
Microsoft 365 E3
Full desktop Office, 100 GB mailbox, Entra ID P1, Intune Plan 1, Defender for Endpoint P1, Defender for Office 365 P1, DLP and manual sensitivity labels, basic retention.
PROTECTION and GROWTH packages: full Conditional Access, MFA and Intune management, Defender tuning, Purview DLP and labels, quarterly CIS and Maester hardening, identity management, incident response and compliance reporting.
Compared with E5 it lacks e.g. auto-labelling, PIM, Identity Protection and Attack Simulator.
Microsoft 365 E5
The highest level of security, compliance and analytics: Entra ID P2, Defender for Endpoint P2, Defender for Identity, Defender for Cloud Apps, Defender for Office 365 P2, advanced Purview and Power BI Pro.
Full GROWTH package: PIM, risk-based policies and access reviews, full Purview (auto-labelling, endpoint DLP, retention, eDiscovery, Insider Risk), Attack Simulator campaigns with training, incident response across the full Defender stack, Copilot and SharePoint/Teams governance.
Matrix
Service versus minimum licence level
From which licence level a given service is technically possible.
✓ available · - not available · P1/P2 service plan
How we work
Projects, subscription and CSP licensing
We work in three complementary modes. A licence upgrade is never a goal in itself - we recommend it only where it meets a real need or regulatory requirement, after a cost analysis.
One-off projects
Migrations, deployments, audits, hardening and development projects, billed per task.
Exchange on-premises and Google Workspace to Microsoft 365, tenant-to-tenant migrations.
File servers and NAS to SharePoint, Dropbox and Google Drive to OneDrive.
Domains, DNS and SPF, DKIM and DMARC.
Licence audit and Microsoft audit preparation, IT roadmap.
Disaster Recovery for Microsoft 365: tenant recovery, break-glass accounts, recovery tests.
Subscription care
Ongoing cooperation with a defined SLA, billed monthly per user. It brings continuity, predictable costs and constant oversight of the environment.
It is built on a repeatable cycle: measurement (Maester and Secure Score) → recommendations → implementation → report → re-measurement.
CSP licensing
As a Microsoft CSP partner we supply and bill licences directly.
One point of contact: licences and services from one supplier, on one invoice.
Flexibility: number and type of licences matched to current needs.
Recommendations backed by delivery: we carry out every change technically and commercially.
Constant cost visibility that lets us remove unused accounts and pick the right plans.
How we work
How we start
01
Initial audit
We run Maester, review Secure Score, inventory licences and identify the most urgent gaps. Result: a report and a priority map.
02
Action plan
We choose a care package and any one-off projects and prepare licence recommendations.
03
Urgent changes
We implement security improvements: MFA, legacy auth blocking, privileged and break-glass accounts.
04
Subscription care
We move into a steady cycle: measure, recommend, implement, report.
No. Every engagement starts with what can be done on your current licences. We recommend an upgrade only when the unlocked functionality meets a real need or regulatory requirement, always after a cost analysis.
How do you measure security?
We compare the tenant configuration with recognised benchmarks: CIS Microsoft 365 Foundations, CISA/SCuBA guidance and Microsoft Secure Score. We regularly run Maester, which automatically checks more than 300 configuration items. The results show progress in reports for IT and management.
Do you supply Microsoft licences?
Yes. As a Microsoft CSP partner we supply and bill licences directly, in one relationship and on one invoice. Full visibility of licence usage also lets us optimise it.
How do you bill?
In three independent streams: subscription care billed monthly per user, project services billed per task and Microsoft 365 licences under CSP. We prepare specific rates in an individual quote.
We use cookies only for traffic analysis (Google Analytics 4) and only with your consent. Without it, analytics stays off. You can change your decision at any time via the "Cookie settings" link in the footer.
Privacy policy