Strengthen your clients’ cyber resilience
With ransomware, phishing emails and DDoS attacks, chances are your clients will sooner or later face cybercrime. But where do they start in managing cyber security risks? How do they keep security from impeding productivity, or from getting in the way of hybrid and home working?
Security software only stops part of cybercrime. Full digital security for your clients requires more.
It requires understanding each client’s weaknesses and how well their current measures work, the knowledge to follow how cybercrime changes and assess its impact, and a concrete plan of action points and priorities to keep improving the security of their Microsoft environment.
TALK TO OUR TEAMOur approach
Improving organisations
We work with MSPs, MSSPs and CSPs to improve the cyber resilience of their clients, ensuring that employees work as securely and productively as possible, regardless of their location or device.
Technology and software
To do this, we use Microsoft technology your clients may already have in house, unknowingly or unused, and TENET, our in-house developed platform, with read-only access.
A secure digital workplace
For maximum user adoption, we help you make each client’s digital workplace easier and more secure with the right applications and settings. This way, they work more productively while their risk comes down.
A clear roadmap
We work with a clear roadmap. Based on TENET’s findings, we identify each client’s vulnerabilities with you and create a roadmap we use together to keep improving their cyber resilience and productivity.
Local-language reports
Reports download in English, Polski, Deutsch, Nederlands, Français, Italiano and Español.
Partner enablement
Our team trains yours on the platform, the delivery workflow and how to present findings in short enablement sessions. You also get ready-made partner collateral to use with every client.
Fast
No agent, no server and nothing to install in the client’s environment. Findings appear within minutes of connecting.
Evidence-based
Every finding comes from the client’s own tenant data through a read-only connection, not from a questionnaire.
Action-ready
The Cloud Security Report ends in prioritised recommendations, so the client sees where to start.
Risks the assessment surfaces
Our agentless platform assesses Entra ID, Intune, SharePoint and OneDrive, Azure AI services and Foundry, and Azure networks, resource performance and configurations across your Microsoft estate.
Identities
Privileged role assignments risk-scored per identity, plus Entra ID risk events such as impossible travel, anomalous sign-ins and legacy authentication.
Endpoints
Intune device compliance and Defender for Endpoint posture, including critical CVEs on devices that still pass compliance.
Data
External sharing across SharePoint and OneDrive, with shares to personal email addresses and anonymous links ranked by risk.
Applications
Third-party apps and shadow IT connected to your Microsoft tenant, with high-risk apps called out.
Network
Network Security Group rules across your Azure subscriptions that expose ports to the internet.
Security operations
Incidents raised by Microsoft Sentinel and Microsoft 365 Defender, and which Defender products are in place.
Licenses
Unused license seats and licensed accounts dormant for 30 days, wasted spend and stale access in one list.
AI
Azure AI resources with public network access, key-based authentication or missing content filters, and AI agents with no accountable sponsor.
Build each client's action plan
From first connection to a prioritised action plan, in three steps.
Connect
- The client’s admin grants read-only consent in the setup wizard
- No agent, server or install in the client’s environment
Data collection
- Scan Entra ID, Intune, SharePoint and OneDrive, Azure AI services and Azure networks
Reports and presentation
- Download the four reports under your brand
- Prioritise the recommendations into an action plan
- Present the findings, conclusions and recommendations to the client
- Track each fix in Remediation
Four reports per client
Each managed client in Partner Hub has a Reports menu with four reports, each ready to download under your brand.
Cloud Security Report
Each client’s risk posture across the Microsoft Zero Trust pillars, with a separate AI section.
NIS2 Compliance Report
Gap analysis against NIS2 for clients facing regulatory risk.
NIST CSF 2.0 Compliance Report
Gap analysis against the NIST Cybersecurity Framework 2.0.
Copilot Readiness Report
Which client users are ready for Microsoft 365 Copilot before licenses are bought.
See what your clients will receive: all four reports from a demo tenant, in English, Nederlands, Deutsch or Polski.
DOWNLOAD SAMPLE REPORTSYour brand on every report
Set your company name, logo and accent colour once in Partner Settings. Every report you download picks them up automatically.
Reports download in English, Polski, Deutsch, Nederlands, Français, Italiano and Español, so each client reads their risk in their own language.
Example values
- The product, service or scoped engagement
- The evidence behind it
- Why it matters to the client
- The smallest reasonable next step
Turn findings into opportunities
Partner Hub reads each client's anomaly and application health findings and prepares sales opportunities, each one backed by the evidence that raised it. Raw findings are never passed off as opportunities on their own.
You approve or dismiss each one before it reaches your sales workflow, and your decisions stay with the finding.
Choose how you deliver
Sell assessments and the 90-day risk reduction programme to your clients, delivered by your team or by ours.
Deliver it yourself
- Branded reports in 7 languages
- Every client in one Partner Hub
- An up-to-date report for any client, any time
- Ready-made partner collateral
Delivered by our team
- Presentation under your brand
- Three monthly progress meetings
- Re-assessment at day 90
- You set the price for your client
Get started as a partner
From joining the program to your first client.
- 1
Join the partner program
Get a partner plan with Partner Hub, partner pricing and support from our partner team.
- 2
Get enabled
Learn the platform, the delivery workflow and how to present findings in short enablement sessions with our team.
FAQs
Which permissions does the client grant?
Read-only ones. The setup wizard registers an Entra application with read-only Microsoft Graph permissions and assigns Reader, Security Reader, Monitoring Reader and Cognitive Services Usages Reader on Azure. TENET cannot change the tenant.
See the Microsoft cloud integration guide for the full list.
Can a client without Azure be assessed?
Yes. A Microsoft 365 tenant without Azure subscriptions can be assessed. If the client does use Azure, the admin who connects it also needs Owner or User Access Administrator on those subscriptions so TENET can assign its read roles.
Can I choose which reports a client gets?
Yes. Download any of the four reports on its own, so a client who only needs NIS2 evidence gets just the NIS2 Compliance Report.
Do clients see the sales opportunities?
No. Opportunities stay in Partner Hub for your team to review. The reports show the client’s findings and recommendations only.
How current is the data in a report?
As current as the latest scan. TENET rescans every connected tenant automatically on a schedule, and each report uses the most recent results.