What needs attention now
Open gaps ranked by importance, with the evidence and business impact beside each one.
Free · read-only · no card
See your Microsoft 365 security clearly.
A read-only view of what is strong, what is exposed, and what to fix first.
Microsoft approvalNothing changedPrivate report14-day monitoring trial
Start your assessment
Work email now. Read-only approval next.
Read-only by designKinervo observes. It cannot change tenant settings.
Microsoft approvalAccess is granted on Microsoft's own consent screen.
A report you can sendClear for owners, useful for the people fixing the issue.
Revoke any timeRemove the enterprise app directly in Entra.
Your deliverable
A report designed to be understood, not decoded.
A visual, private report turns tenant evidence into a clear decision: what matters now, and what happens next.
What changed since last time
Control-result drift between scheduled evidence snapshots, separated into improvement, regression and review.
What looked suspicious
Important sign-in, mailbox and permission indicators pulled out of the background noise.
What to do next
A short priority list for the owner, backed by enough detail for the IT provider.
Illustrative preview
Weekly security brief
Northstar & Co.
Week ending 10 August
Read-only monitoring
Posture
78+6
from last week
Sign-in signals
2
recorded in available evidence
Drift
3
control results changed
Priorities
1
action this week
What happened this week4 notable events
Unexpected sign-in signal recordedReview
Forwarding control failed at reassessmentAttention
MFA coverage improved to 96%Improved
Conditional Access control changed stateDrift
Posture trend7 weeks
24 Jun10 Aug
What is assessed
Security configuration, with honest boundaries.
Kinervo reports only what the tenant's permissions and licences allow it to verify. Anything unavailable is labelled—not silently counted as safe.
MFA and sign-in strength
Conditional Access coverage
Admin role exposure
App consent and permissions
Mailbox rules and forwarding
Sign-in and audit indicators
The safe path
Three visible steps. No hidden hand-off.
You stay in control from the first field to the removal of access.
- 01
Identify the company
Enter a work email so Kinervo can prepare the correct organisation-specific Microsoft consent link.
- 02
Review and approve
A Global Administrator sees the full read-only permission list on Microsoft's own screen before accepting.
- 03
Receive the report
Collection runs automatically. Your private report link is delivered to the work email used at signup.
Kinervo can
- Read the approved configuration and evidence.
- Compare control outcomes between scheduled evidence snapshots.
- Explain findings and send monitoring alerts.
Kinervo cannot
- Change a tenant setting or security policy.
- Read the contents of email, files or messages.
- Keep access after your administrator revokes it.
Before you approve
Fair questions, answered plainly.
Can the assessment change anything?
No. Kinervo has read-only permissions. It cannot edit a policy, disable an account, remove a rule or make any other tenant change.
What can it read?
Security configuration and the operational evidence needed for the report: identity protections, policies, roles, applications, audit and sign-in information, mailbox forwarding configuration and public domain-authentication records. It cannot read email, files or Teams message content.
What if I am not the administrator?
The next step can be sent directly to your Microsoft 365 administrator or IT provider, with the permission list and a plain-English explanation.
What happens after the free period?
Nothing is charged automatically because no card is taken. Monitoring stops unless you choose to continue at €199 per month.