✓

Thank you! Your checklist is on the way.

It should arrive in your inbox within the next few minutes. If you do not see it, check your spam or promotions folder.

While it lands, here is the faster option.

I Will Run 47 Security Checks for you. Free. The Full Report Is Yours.

The same 47-point methodology from my public checklist, executed read-only by a senior M365 engineer. Deepest dive where it hurts most: your endpoint stack (Intune, Autopilot, compliance, patching).

Book My Teardown Slot

Read-only access · 10 business days · No obligation · The report is yours forever

What You Get

✓All 47 checks from the public checklist, run against your live tenant. Not a questionnaire, not a demo environment: your actual configuration.
✓Endpoint deep dive: Intune configuration, compliance policies, Autopilot, patch rings, Defender for Endpoint. The module that generates most of your tickets and every question on your cyber insurance form.
✓Identity attack surface: MFA gaps, legacy authentication, stale admin accounts, risky OAuth grants.
✓A prioritized fix roadmap: every finding scored by severity and effort, ready to drop straight into your ticket queue.
✓A 2-page executive summary written for your CEO and CFO. Ammunition for your budget conversation, not homework.
✓Delivered on a 45-minute walkthrough call.

How It Works

Book a 15-minute scoping call. I confirm fit and walk you through the read-only access setup.
You grant read-only access (Entra app registration, Read scopes only, revocable in one click). I never touch configuration.
In 10 business days you get the full report and the walkthrough call.

My Guarantee

If I do not find at least 5 high-severity gaps, I will work for you for a full week, free. Your backlog, your priorities.

Why Free?

No catch, just math. Some companies who read the report ask me to fix what I found and stay for co-managed support. That is how I earn contracts. Most take the roadmap and run it themselves. Both outcomes are fine with me, and the report is yours forever either way.

This is the same depth of assessment consultancies bill four figures for. I would rather earn the relationship.

Who Runs It

Every teardown is done by hand by me, the engineer whose name is on this site. No juniors.

Alex Nuryiev

Hi, I’m Alex Nuryiev. With two decades of Microsoft expertise, I step in as the dedicated endpoint and UEM domain owner for companies that pay for M365 E3/E5 but have nobody running it. Intune, compliance baselines, endpoint security, and executive reporting, so you pass every audit and report to the board with data, not guesses.

Hand-run by me, so I take 5 teardowns per month. When the month is full, you go on next month’s list.

Questions You Should Ask

What exactly does read-only access mean?

An Entra app registration with Read scopes only (Microsoft Graph). You see every permission before you approve, and you can revoke access in one click the moment I deliver.

Will you pitch me on the walkthrough call?

The call is about your findings. If you want help implementing, say so. I will not chase you.

We already have an MSP.

Good. The report will show you what they have missed. Take it to them, I do not mind.

Who sees my data?

The findings stay between us. Nothing is shared, benchmarked, or reused.

What does the free week cover if the guarantee triggers?

One senior engineer, one full week (up to 40 hours, remote), working your M365 backlog. Your priorities, my hands.