M365 and Entra ID configuration security, on a schedule.
Assess Microsoft 365 and Entra ID configuration against security baselines. Investigate identity, privileged access and Conditional Access, then give findings an owner.
What a scan returns
Illustrative. One customer, one scan.
MFA not enforced for 3 Global Administrators. Conditional access policy excludes admins.
Legacy authentication protocols (IMAP, POP, SMTP basic) still enabled tenant-wide.
What it scans
- Entra ID: MFA enforcement, conditional access, privileged-role posture
- Exchange Online: transport rules, anti-phishing policies, DKIM/DMARC posture
- Teams: external access posture, guest sharing controls, app permissions
- SharePoint & OneDrive: sharing settings, default link types, anonymous link expiry
- Defender for Office 365: safe-link, safe-attachment, anti-spam baselines
- Audit & retention: unified audit log status, retention policies in scope
What you get back
Every module plugs into the same platform layer. Findings do not just sit in a report.
Five baselines in one scan
Every tenant scored against CIS, CISA SCuBA, EIDSCA, the Maester test set, and ORCA at once, not one framework at a time.
Drift since last scan
See which tests started failing between Microsoft secure-defaults changes and your last review.
One-click action items
Turn a failing test into a tracked task with the remediation step attached, then push it to your ticketing system.
Export and white-label report
Hand the customer a branded summary of their identity posture, not a raw test log.
What findings look like
Illustrative. Each finding is ranked by severity and tied back to the resource that produced it.
MFA not enforced for 3 Global Administrators. Conditional access policy excludes admins.
Legacy authentication protocols (IMAP, POP, SMTP basic) still enabled tenant-wide.
External Teams meeting access permits anyone (anonymous) to join without lobby.
Why Mobula?
- No centralised cross-tenant view. Each customer is a separate score to chase.
- Per-tenant trend only. No aggregated history across the customers you manage.
- No action workflow and no way to tune risk tolerance per client.
- Every customer tenant in one view, scored against five baselines.
- Each scan kept, so identity posture is a trend you can show.
- Failing tests become tracked actions and white-label reports.
Findings mapped to
See it on your tenant.
Book a 30-minute walkthrough. We'll show you what M365 and Entra ID configuration security, on a schedule looks like on a live environment.