What it is
A focused, read-only review of the Microsoft 365 environment.
Specialist Microsoft 365 security · UK estate and letting agencies
A clearer view of your Microsoft 365 security.
Specialist Microsoft 365 security for independent estate and letting agencies. Practical advice from an experienced professional, with direct access to the person doing the work.
Free initial health check · read-only review · no obligation
The Microsoft 365 Security Health Check.
A focused review. Practical results.
Free initial assessment · Read-only · No obligation
What’s reviewed
Authentication, privileges, mail rules, sharing and core tenant configuration.
What you receive
A concise report with findings, practical impact and prioritised recommendations.
No obligation
Act on the findings yourself, through your existing IT provider, or with Uriel Cybersecurity.
What you receive
A report you can actually use.
No raw technical export and no wall of jargon. The aim is to give an owner or director a clear view of what matters and what to do next.
Security Health Check — SummaryIllustrative layout
Authentication & MFAAction recommended
Mail flow rulesReviewed
External sharingAction recommended
- FindingsWhat was reviewed and what was found, described in plain language.
- Practical impactWhy each finding matters to the business, rather than an abstract severity score.
- Recommended actionsClear steps for you or your existing IT provider to consider.
- PrioritiesA short list of what to address first, so effort goes where it matters most.
The report is yours to use, however you choose to act on it.
Scope
What we check.
Estate and letting agencies handle sensitive correspondence, client information, deposits and payment instructions through email every day, so the review focuses on the Microsoft 365 weaknesses most likely to contribute to compromised accounts, email fraud or unintended data exposure. It's practical rather than exhaustive.
Authentication & MFA
MFA enforcement, authentication settings and account security.
Privileges
User and administrator access, including excessive permissions.
Mail security
Forwarding rules, transport rules and other relevant mail-flow configuration.
Tenant configuration
Core Microsoft 365 security settings, Security Defaults, Conditional Access and related configuration.
Sharing & exposure
External sharing and potentially exposed resources.
Agency-specific checks
Checks relevant to how independent estate and letting agencies use Microsoft 365.
This is a focused review, not a penetration test or exhaustive audit. It's designed to surface the issues most likely to matter for a small agency, including things day-to-day IT support isn't usually set up to check.
About Uriel Cybersecurity.
Professional credentials
Qualified. Experienced. Independent.
-
NCSC Certified Master's DegreeMSc Cybersecurity . Robert Gordon University
-
Cloud Infrastructure Security Professional
-
Microsoft Certified5+ years of hands-on Microsoft 365 & Azure security experience
Direct expert access
You deal directly with the person carrying out your security review.
Broad sector experience
Real-world experience across a wide range of environments.
Uriel Cybersecurity is run by Dami, a cybersecurity professional whose background in cybersecurity and incident management was built through engineering work in an MSP across housing, financial services, government organisations, health and aviation.
Sectors include:
- Financial services
- Government
- SMEs
- Operational technology
- Aviation
- Housing
Experience includes work with:
Arhag Housing · Gateway Housing · River Clyde Homes · Cartrefi Conwy · Hawkins\Brown
Why Uriel
Microsoft 365 security is just one part of protecting your agency.
We complement your existing IT provider with an independent review focused specifically on Microsoft 365 security.
Your IT provider focuses on keeping you online.
I focus on keeping your Microsoft 365 environment secure.
The two work together. The Health Check gives you useful findings that you can take directly to your existing IT provider, or ask Uriel Cybersecurity to help put into practice.
Follow-on work
If we find something to fix.
If the health check finds something worth fixing, we can provide fixed-fee remediation work, agreed up front, never open-ended hourly billing.
MFA & Conditional Access setup
Enforce multi-factor authentication across staff and admin accounts, with sensible Conditional Access (or Security Defaults on smaller licences).
From £250Mail flow & sharing cleanup
Review and remove suspicious forwarding or transport rules, and tighten external sharing defaults.
From £200Privilege review & tidy-up
Right-size administrative access so accounts hold no more privilege than their role needs.
From £150Full remediation
Every finding from your health check addressed as one bundled engagement, at a lower combined rate than booking each fix separately.
From £550Exact pricing depends on what the health check finds and your licence tier. You will always see the fixed fee before any work begins.
FAQ
Questions, answered plainly.
Is the health check really free?
Yes. There is no charge for the initial Microsoft 365 Security Health Check and no obligation to purchase anything afterwards.
Do you need access to our Microsoft 365 tenant?
Yes, temporary read-only access is needed to review the configuration properly. Access should be limited to what is required for the assessment and can be revoked by you.
Is the assessment read-only?
Yes. The health check is a review only. No settings, permissions or configuration are changed as part of the assessment.
How long does it take?
Arranging access and providing context typically takes around 15–20 minutes. The review itself is carried out separately and you will be told roughly when to expect the report.
Will you change anything in our system?
No. Any recommended changes are left for you or your IT provider to action, unless you separately ask Uriel Cybersecurity to help with implementation.
What happens after the assessment?
You receive the written report and can act on it yourself, through your existing IT provider, or with further help from Uriel Cybersecurity if you choose.
Can our existing IT provider act on the findings?
Yes. The report is written so that you can take the findings to your existing IT provider. Uriel can also discuss the recommendations with you if that is useful.
Do we need to become a client afterwards?
No. The health check is designed to be useful on its own. There is no expectation to engage Uriel Cybersecurity for further work.
What if the health check finds something that needs fixing?
You will get a fixed-fee quote before any work begins. See follow-on work for typical ranges. You are always free to take the findings to your existing IT provider instead.
Next step
Ready to get a clearer view of your Microsoft 365 security?
Free. Focused. Practical. No obligation to do anything further afterwards.
hello@urielcyber.co.uk
Uriel Cybersecurity works remotely with independent agencies across the UK.