Skip to content
BlueStone Tech
Project 07 · Identity & Productivity

Identity-First 2-Hour Audit

Don't know where to start? Two hours, one report, prioritised by risk.

What's included

Fixed scope. Written deliverables.

Every line below is in the Statement of Work. We don't expand scope mid-project; we don't shrink it. If something needs to change, we agree it in writing.

  • Quick inventory of who has what access in your Microsoft 365 tenant
  • MFA status check across every account
  • Password reuse / weak password identification (without seeing the passwords)
  • Dormant account list (people who haven't logged in for 90+ days)
  • Global Admin sprawl assessment
  • One-page prioritised action plan, mapped to fixed-price remediation offers above

Frequently asked

About this project specifically.

What do you actually look at in 2 hours?
Read-only access to your Microsoft 365 tenant for one hour, focused on: who has Global Admin / Privileged Roles, MFA status per account, dormant accounts (no sign-in for 90+ days), password policy settings, Conditional Access policies (or absence of), basic licence usage. Hour two is writing the report. You get a same-day one-page action plan.
Why $390? Can't this be free as a sales call?
Two hours of audit work has an actual cost. The $390 reflects that and filters for serious enquiries. If you sign a Standard or Secure+ retainer within 14 days, the $390 is fully credited back — so for serious clients it's effectively free. For 'just curious' clients, we still deliver real value.
What if I don't want to grant admin access for an audit?
Read-only Global Reader access is enough. We don't make changes; we don't see message contents or file contents; we don't store credentials. The access can be revoked the moment we hand over the report. Most law firm and accounting clients are comfortable with this — the report is more useful than the perceived risk.
Same-business-day email reply · no sales calls

Want a quote for Identity-First 2-Hour Audit? It takes 2 minutes.

We'll email back with a tailored proposal — no calls, no follow-ups you didn't ask for.