ASSESSMENT
The full review of your Microsoft cloud, in under three business days.
01 · SCOPE
What we review, and what we don't.
IN SCOPE
- Azure subscriptions: cost structure, unused resources, mispriced reservations
- Entra ID: identity, conditional access, privileged roles, guest users
- Microsoft 365: licence usage, shared mailboxes, Teams, SharePoint permissions
- Tagging, cost allocation, and budget alerts
- Backup, disaster recovery, and SLA coverage
OUT OF SCOPE
- On-prem infrastructure
- Third-party apps outside the M365 estate
- Code reviews and application-level performance
- The remediation work itself (offered separately as a fixed-fee package)
02 · RUBRIC
Three categories. Same rubric every time.
Every finding is prioritised high, medium, or low, and tied to either annualised savings or a concrete risk.
COST
Cost optimisation
- Unused VMs, disks, and snapshots
- Mispriced reservations and savings plans
- Storage tier mismatches
- Licences without users and double assignments
- Egress and bandwidth spikes without business reason
SECURITY
Identity and access
- Privileged roles without Privileged Identity Management
- Conditional access gaps (locations, devices, MFA)
- Guest users with expired or excess access
- Service principals with overly broad permissions
- Audit logging: coverage and retention
RELIABILITY
Availability and backup
- Single points of failure in production workloads
- Backup coverage and tested restores
- SLA mismatches (committed versus configured)
- Monitoring and alerting gaps
- Disaster recovery RPO/RTO documentation
03 · SAMPLE REPORT
A report, not a slide deck.
We deliver a 25 to 40 page PDF: executive summary, every finding with evidence, prioritised recommendations, and an annualised savings table. No consulting fluff, no template pages.
DELIVERABLEPDF · 25–40 PExecutive summary · findings with evidence · annualised savings · mapped remediation options.
04 · PRICE
Fixed fee. No cure, no pay.
FIXED FEE€3,000ex VAT · one-time
If projected 12-month savings don't exceed €3,000, we don't invoice. You keep the report either way.
Included
- Full scan across Azure, Entra ID, and M365
- PDF report with every finding and evidence
- 30-minute walkthrough call
- Written confirmation of credential removal
- 30 days of follow-up support on report questions
03 · GUARANTEEIf we don't find €3,000 in annual savings,
If we don't find €3,000 in annual savings,
we don't invoice.
The guarantee is measured on annualised, identified savings, written consistently into the report, the SOW, and the invoice. You keep the full report either way.
GUARANTEE · MEASURED ANNUALLYNO CURE, NO PAYIf projected 12-month savings don't exceed €3,000, we don't invoice. The risk sits with us, not you.
04 · HOW IT RUNS
From first call to invoice, under one week.
01
Intake call
30 min · free · no prep required
02
Documents
SOW · NDA · DPA via DocuSign
03
Read-only access
Time-limited · confirmed removed
04
Scan
< 3 days · same rubric every time
05
Report + walkthrough
Findings + remediation options
05 · QUESTIONS
Questions about the assessment.
A signed SOW, NDA, and DPA via DocuSign. After that, one technical contact who grants temporary read-only access. No meetings or prep work on your side.
From the moment read-only access is granted, we deliver the report within three business days. The legal prep (SOW, NDA, DPA) usually takes another two to three days.
Yes. We prefer to scan everything within Azure, Entra ID, and M365, but specific subscriptions or tenants can be excluded if legally or operationally needed. We write it into the SOW.
Up to three subscriptions and one tenant are included. Beyond that, there's a transparent surcharge per extra tenant or subscription, agreed upfront, never billed after the fact.
07 · ACCEPTING ENGAGEMENTS
Accepting engagements.
One intake call. 30 minutes. No prep, no pitch.
Book an intake call→30 minutes · free · no prep required