Microsoft 365 Health Check

A senior specialist goes through your tenant's security, Identity, email authentication, sharing settings and licensing, then hands you a prioritised report and walks you through it. You find out exactly where you stand, for a fixed price, with no obligation to buy anything else.

Most tenants were set up in an afternoon

Someone signed up, added the users, connected email, and moved on. That was probably years ago. Since then Microsoft has changed defaults, staff have come and gone, sharing links have multiplied, and nobody has looked at the admin centre unless something broke.

The health check is a structured review by someone who manages Microsoft 365 Identity and security at 200,000-user scale every working day. Not a sales exercise. If your environment is in good shape, the report says so.

What gets checked

Security baseline

Secure Score review, Defender configuration, anti-phishing and anti-malware policies, and the settings attackers check first.

Identity & access

MFA coverage and gaps, Conditional Access policies (or the absence of them), admin role sprawl, and stale accounts that should have been disabled.

Email authentication

SPF, DKIM and DMARC status and alignment. Whether your domain can be spoofed, and whether your legitimate email is landing in junk folders.

Sharing & governance

External sharing settings, guest access, and where company data can currently leave the tenant without anyone noticing.

Licensing waste

Unused licences, over-licensed accounts, and plan mismatches. This section alone frequently covers the cost of the review.

What you get

A prioritised, plain-English report: what is fine, what is risky, and what to fix first. Plus a 30-minute walkthrough call. Fix it yourself, hand it to your IT provider, or engage me for the remediation. All three are fine.

Want to look at the licensing part yourself first? The Microsoft 365 licensing review page sets out where the waste usually is and how to find it in your own admin centre, at no cost.

Real estate, legal, conveyancing or accounting practice? AML/CTF reporting entities came under the Privacy Act on 1 July 2026 for that work, and the Privacy Act readiness assessment covers this ground plus identity document retention and audit logging.

Only worried about email spoofing and deliverability? The Email Security Health Check covers SPF, DKIM and DMARC on its own, $299 GST inclusive.

Book a Microsoft 365 Health Check

$599 GST inclusive, fixed. Most reviews are delivered within a week of tenant access being arranged.

Questions first? Call 0403 401 250 or email jamie@hamilton365.com.au