For the CIO, the head of security and the CFOOn request
We review the state of your tenant (your company's organization in Microsoft's cloud) and tell you which accounts and permissions are a risk and which licenses are paid for and not used.
You get the risky accounts and permissions by priority and the licenses you can adjust. Scope and timeline are in writing before we start.
Updated on
You don't need it if your company has few accounts, no guests or connected apps, and someone already goes over them.
The tenant is the key to your email, your documents and your cloud. An account without MFA or one permission too many gives no warning until the day someone uses it, and the licenses are billed every month all the same. Across the companies Zylo measures (SaaS Management Index 2026), 36% of SaaS licenses sit below recommended usage on average. That figure covers all subscription software, and Zylo sells license management.
36 %
of SaaS licenses sit below recommended usage, on average across the companies Zylo measures
Zylo, SaaS Management Index 2026The control points of these five reviews are not counted yet, so we publish no figure: the scope is agreed in writing for each case.
Trademarks and logos belong to their respective owners. Their use here is descriptive only and implies no commercial relationship or sponsorship.
In 30 minutes we look at the size of your tenant and which Azure subscriptions are included. Then you get the scope and timeline in writing.
We look at and measure accounts, permissions, apps and licenses. We change nothing in your tenant unless you ask.
You get the risky accounts and permissions by priority and the licenses you can adjust. We go through it with your IT team.
Priority: High
Global administrator account without MFA
An example of the report format, not a client's.
Shall we talk about your case?
A 30-minute meeting to see what you have and what to review first.
All three are useful, each for one thing. AI brings the volume and people bring the judgment: that is why our review uses an automated AI tool and senior developers supervise it.
The review is done by a team of senior developers, with many hours of development and of finding the mistakes AI makes when it codes. We know more than 1,200 review points. The automated AI tool goes through them, and people verify, direct and review.
Team of senior developers
José María Salido, founder of Sondeon, answers for it
It is your company's organization in Microsoft's cloud: Entra ID users, Microsoft 365 licenses, email, SharePoint, Teams and Azure subscriptions all hang from it. Whoever controls an administrator account controls all of that.
It is the score Microsoft uses to summarize your tenant's security. There is no single good number: it depends on which licenses you have and which controls you can turn on. We look at which of the pending actions are worth doing in your tenant, and in what order.
We need read-only permissions and one person on your IT team to answer questions. We change nothing unless you ask: the health check looks and measures.
Either works. The diagnosis comes first: each risky account and permission with its evidence and its priority. The fix is separate and only happens if you request it: your team applies it with the list in hand, or we do if you ask us to.
The 30-minute meeting is free. The rest depends on the size of your tenant: how many accounts, apps and Azure subscriptions are included. We go over it in that meeting, and you get the scope and timeline of our health check in writing before we start.
It tells you how your tenant stands today, which is different from turning on the Microsoft 365 audit log. Our health check reviews accounts without MFA, guests and apps with excess permissions, and unused licenses, and delivers every finding with its evidence.
Yes. We review Power BI, Microsoft Fabric, Databricks, Microsoft 365 and Microsoft agents. Power BI and Microsoft Fabric each have their own health check and their own page: data that arrives stale or broken, and licenses or capacity paid for and not used.
Automations that fail silently, users who have left and unused licenses you keep paying for in your Salesforce org.
Pipelines that feed reports with stale or broken data, and capacity that is paid for but not used.
Jobs that fail without warning, clusters that cost more than they deliver and users who no longer need access.
Reports built on stale or broken data, refreshes that fail and licenses assigned to people who no longer use them.
Fill in the form and we email you to set a day and a time. It is 30 minutes to see what you have and what to review first.
