Learn how our AI Agent Dream Team will accelerate innovation across your organisation
PHONE: 1300 832 252
Sphere Portal
Search our site:
Tecala and Microsoft
Microsoft 365 Core Security Assessment  |  Free Executive Preview

We find what is exposed in your Microsoft 365.
Before Copilot does.

A free, read-only preview of your Microsoft 365 and Entra ID security posture. 73 evidence-based checks. Your score and top findings land within 24 business hours.

  • Executive-ready summary for boards, insurers and auditors
  • Top 6 risks, ranked with plain-English fixes
  • Mapped to ASD Essential Eight, NIST 800-53 and CIS Controls

We typically find 8 to 15 critical or high-severity issues, even in well-run Microsoft 365 tenants.

Australian owned and run. 95%+ client retention.

ASD Essential Eight
NIST 800-53
CIS Controls
Microsoft Entra ID

Book your free preview

We will be in touch within one business day to lock in a time.

  • Yours to keep
  • Read-only
  • No changes made
  • 24-hour report
A 20 second self check

Four questions.
Can you answer them today?

Most IT leaders can answer one or two of these with confidence. The preview answers all four with evidence.

Tap an answer for each question.

Your result appears here.

Is MFA enforced for every user, including guests and service accounts?

Do you know exactly how many accounts hold permanent admin rights, and why?

Can you list every third-party app with consent to read mail or files in your tenant?

Could you show a board, insurer or auditor exactly who has access to what, right now?

Tap an answer for each question.

Your result appears here.

Sample output
Executive PreviewMicrosoft 365 Security Posture
Prepared forAcme Pty Ltd
58

Posture score 58 / 100. 14 issues identified. Your top 6, including 3 critical, are explained in the report.

Identity and admin42
Privileged access31
App and OAuth risk64
Email security81
Device posture77
Illustrative, not a real client73 checks · 7 domains
What you receive

Clear findings.
Practical priorities.

  • 1
    Posture score and executive summaryOne page your CEO, board or insurer can read without an IT translation.
  • 2
    Up to 6 of your highest-severity risksRanked by severity, with the fix for each explained in plain English.
  • 3
    Tenant overviewUser counts, licensing, MFA registration rates and guest exposure, so you’re not starting from a blank page.
  • 4
    Framework alignmentMapped to the Essential Eight, NIST 800-53 and CIS Controls for audit and compliance conversations.
  • 5
    A walkthrough with a specialistBring your IT lead. We explain the score and findings together, and you decide what’s next.
Book my free preview →
How it works

Three steps.
Under an hour of your time.

Step 1

Book

A minute

Submit the form. We confirm a time within one business day.

Step 2

Connect

~5 minutes

Grant temporary read-only access. Nothing is installed or changed; the 73 checks run in the background.

Step 3

Walk through the findings

Within 24 business hours

We explain your score, top risks and priorities. You keep the report.

Book my free preview →
Why now

Configured is not the same as secure.
And AI makes the gap visible.

Copilot uses the permissions already in your tenant. Existing identity, access and app risks become easier to surface, and harder to ignore.

Risk 1

Identity and access gaps

Weak MFA, legacy authentication and unfinished Conditional Access.

Risk 2

Privileged access sprawl

Permanent Global Admin access and stale privileged roles.

Risk 3

App and OAuth risk

Third-party apps can keep reading mail and files long after approval.

Risk 4

Governance blind spots

Stale accounts, guest access and missing access reviews.

1 in 3

Organisations we assess have critically overprivileged accounts sitting in production, unreviewed.

Lower riskHigher risk
Tecala Assessment Data
Who books this

Built for the people who own the risk.

  • IT leaders preparing for Copilot or a board review
  • CISOs and security leads signing off AI adoption
  • CIOs and executives reporting to boards, insurers or auditors
  • Organisations with 100–1,000 staff on Microsoft 365
Before you book

The questions people actually ask.

Yes. The Executive Preview is free for Australian organisations that fit our client profile. There is no invoice, no credit card and no obligation. The full Core Security Assessment and any remediation work are scoped separately if you want to go further.
You will get a walkthrough of your findings from a security specialist, not a salesperson. If there is a sensible next step we will say so. If there is not, we will say that too, and you keep the report either way.
A read-only connection to your Microsoft 365 tenant. A Global Administrator grants consent, which takes about 5 minutes, and the scan itself then runs in the background for 15 to 60 minutes with no further involvement from your team. We do not install anything and we do not change anything.
The assessment is read-only and non-disruptive, using an application-only Microsoft Graph API connection. Access runs through a temporary app registration you can remove immediately after the scan. We are happy to walk your security team through exactly what is read and why.
Your score and top findings typically land within 24 business hours of the scan. Most organisations are booked, connected and reviewed inside a week.
Secure Score is a useful baseline, but it is a self-assessment against Microsoft’s own model. This is independent: every finding is sourced directly from the Microsoft Graph API, names the specific accounts, policies and apps affected, and maps to the ASD Essential Eight, NIST 800-53 and CIS Controls. Your Secure Score is captured in the report alongside it.
The free preview covers identity, privileged access, applications, devices and email: the 7 domains that sit underneath any Copilot rollout. Dedicated Copilot governance and SharePoint exposure checks are available as a next step once you have seen your Core results.
Yes. Copilot is the trigger for many, but identity, access and app risk are business risks whether or not AI is in the picture. Cyber insurers and auditors ask the same questions.
Book your free preview

Know your risks. Fix what matters.
Prove your posture.

Get an evidence-based view of your Microsoft 365 security posture within 24 business hours, ready for the board, insurer or Copilot conversation.

Book your free preview

We will be in touch within one business day to lock in a time.

  • Yours to keep
  • Read-only
  • No changes made
  • 24-hour report