Improve Your Cloud Security Based On Facts

The Self-Service Assessment is offered to you free of charge to help you understand your current Azure and Microsoft 365 security posture. It is a simple and quick exercise that provides valuable insights and recommendations. This is a great starting point for working towards cloud resilience.

A 14-day TENET trial account is created for you automatically. Sign in to TENET with the same Microsoft account to see your results across the platform — prioritized recommendations, risk findings, and downloadable reports — rather than a single static report.

You can download your Cloud Security, Compliance, and Copilot Readiness reports in English, Polski, Deutsch, Nederlands, Français, or Italiano — just choose a language from the dropdown before downloading.

No. This Self-Service Assessment is meant to provide you with quick insights into your security position based on essential cloud security controls. While it will help you make security improvements effectively, the results of this assessment do not serve as a cybersecurity audit or prove compliance with local regulations or security frameworks.

If you worry about your organization’s cybersecurity position and you would like to receive relevant insights and recommendations with only a small effort; yes, it is! Cybersecurity incidents are all too common, and many organizations do not have adequate resources to safeguard the data they need to operate. This assessment will help you understand your cybersecurity position and make effective improvements.

The Self-Service Assessment will be of help to anyone who wants fact-based recommendations to improve their Azure and Microsoft 365 security position. If you work for a larger organization and want a guided, in-depth review instead, you can book a free expert assessment with TENET rather than running the self-service version.

No separate scan setup is needed. If you can sign in as a Microsoft admin and grant the requested permissions, you can run the assessment yourself. TENET creates an Entra application registration and service principal, but does not install an endpoint agent. Your Microsoft sign-in credentials are never shared with TENET.

Security is a team sport, and we’re all in this together. It is our commitment to help every organization understand its security position, so we offer this Self-Service Assessment free of charge to provide recommendations that effectively improve your security posture.

The Self-Service Assessment reads directly from your Microsoft 365 and Azure environment via Microsoft Graph and Azure APIs — there is no separate endpoint agent, local Active Directory scan, or email DNS scan involved.

Most organizations complete the assessment in about five minutes. Larger environments can take a little longer while the scan finishes — you can leave the page open and it will update automatically.

Yes. The assessment runs as a single, continuous sign-in and scan. If you close the window partway through, progress isn’t saved — simply start again from the Self-Service Assessment page.

You’ll need to sign in with a Microsoft admin account and grant the read-only permissions shown on Microsoft’s consent screen. No credentials are ever entered into or stored by the Self-Service Assessment platform — the sign-in happens entirely through Microsoft.

Select ‘Start Your Assessment’ on the home page. A Microsoft sign-in window opens immediately — there’s no separate registration step or email to wait for.

The Microsoft sign-in window asks you to approve the read-only permissions TENET needs to read your Azure and Microsoft 365 configuration. TENET creates an Entra application registration and service principal to use those permissions; it does not install an agent or modify your workloads.

You’ll need a Microsoft account with the Global Administrator or Privileged Role Administrator role in your tenant — that’s the role Microsoft requires to approve the consent.

Your browser may have blocked the pop-up. Allow pop-ups for this site and select ‘Start Your Assessment’ again.

Information collected during your assessment is isolated to your organization and is not combined with any other customer’s data.

Data read from your Microsoft 365 and Azure environment goes through a controlled process — cleanup, enrichment, and analysis — to produce your recommendations. Data is encrypted at rest and in transit throughout.

Access to customer data is limited to what’s required to deliver the service, and administrative access is logged.

Your data is encrypted at rest and in transit, and kept isolated from other customers’ data.

No. The assessment never asks for or stores your credentials — sign-in happens entirely through Microsoft’s own consent screen, and TENET only receives the read-only access you approve there.

If your trial does not continue into a paid plan, TENET removes the assessment tenant record and stored connection credential within 21 days of the assessment. Account and associated tenant data are permanently deleted 90 days after the trial subscription is cancelled, unless the account is reactivated or retention is required by law. If you continue as a TENET customer, your data is retained for as long as you remain a customer.

The assessment stores the profile of the admin who signs in (name, email, and organization name) to set up your trial account, along with the standard Microsoft 365 and Azure identity data covered by TENET’s regular product privacy documentation.

Your data is used exclusively to provide you with insights and recommendations to improve your security position. It is not shared with third parties.

Recommendations are generated by TENET’s own systems from your assessment data. Your data isn’t shared with third parties and isn’t used to train any shared or external AI models.

After you approve the Microsoft consent, TENET reads your Azure and Microsoft 365 configuration directly via Microsoft Graph and Azure APIs. There’s no local application to download or run.

TENET requests read-only Microsoft Graph and Azure permissions — the same permissions used for TENET’s standard onboarding. No write access is ever requested.

No — unlike a one-off scan, the Self-Service Assessment sets up the same ongoing, read-only connection TENET uses for continuous monitoring, so your results stay available in your TENET account afterward. Removing the tenant from TENET removes TENET’s stored connection credential; to remove the Entra application registration itself, remove it in Microsoft Entra.

Larger environments — more users, groups, subscriptions, and resources — simply take longer to read and analyze. You can leave the page open; it updates automatically as each stage completes.

The Self-Service Assessment provides insights into your organization’s cybersecurity posture and actionable items to mitigate the discovered risks. It’s built by TENET, a Microsoft-focused Cloud Risk Intelligence Platform trusted to continuously monitor Azure and Microsoft 365 risk, and consists of a set of automated scans of your environment. It’s the perfect way to start improving your essential cybersecurity controls based on facts, with only a limited effort.

The Zero Trust Architecture principles are defined by The Open Group, a global consortium that enables the achievement of business objectives through technology standards. The principles are product-agnostic, and TENET maps its recommendations to the relevant Microsoft products and Microsoft’s Zero Trust Reference Architecture. More information can be found at theopengroup.org and microsoft.com/en/security/business/zero-trust.

The Zero Trust Principles are:

1. Verify explicitly

Always authenticate and authorize based on all available data points, including user identity, location, device health, service or workload, data classification, and anomalies.

2. Use least privileged access

Limit user access with just-in-time and just-enough-access (JIT/JEA), risk-based adaptive polices, and data protection to help secure both data and productivity.

3. Assume breach

Minimize blast radius for breaches and prevent lateral movement by segmenting access by network, user, devices, and app awareness. Verify all sessions are encrypted end to end. Use analytics to get visibility, drive threat detection, and improve defenses.

Instead of assuming everything behind the corporate firewall is safe, the Zero Trust model assumes breach and verifies each request as if it originates from an open network. Regardless of where the request originates from or what resource it accesses, Zero Trust teaches us to “never trust, always verify.” Every access request is fully authenticated, authorized, and encrypted before granting access. Micro-segmentation and least privileged access principles are applied to minimize lateral movement. Rich intelligence and analytics are utilized to detect and respond to anomalies in real time.

More information can be found at theopengroup.org and microsoft.com/en/security/business/zero-trust.

Security is relative to the threats and risks an organization faces; there is no absolute security. What’s appropriate for one organization can be overkill for another — a one-size-fits-all security program does not exist. The Self-Service Assessment measures your cybersecurity practices against the Zero Trust Architecture as a strong, well-established foundation. Microsoft describes Zero Trust as: “the essential security strategy for today’s reality... the mandate emerged for a Zero Trust approach to verify and secure every identity, validate device health, enforce least privilege, and capture and analyze telemetry to better understand and secure the digital environment.” (Zero Trust whitepaper, microsoft.com/en-us/security/business/zero-trust). With hybrid and remote work now the norm for many organizations, the Zero Trust architecture remains highly relevant.

The Zero Trust Defense Areas are six topics defined by Microsoft. See below.

• Identities
• Endpoints
• Apps
• Data
• Infrastructure
• Network

Every organization should periodically check their cybersecurity position — not only to identify new risks, but also to report on progress to internal stakeholders, auditors, shareholders, and government entities. The Self-Service Assessment gives you a snapshot; TENET’s full platform extends that into continuous monitoring across Azure and Microsoft 365, so you’re not starting from scratch each time. Simply sign in with the same Microsoft account after your assessment to explore your results and add more tenants from TENET, or reach out to sales@aesonsolutions.com.

TENET offers a full Cloud Risk Intelligence Platform that goes well beyond this Self-Service Assessment, covering IAM, anomaly detection, compliance, and AI risk monitoring across your entire Azure and Microsoft 365 estate. Book a free 30-minute expert assessment to see what a full scan of your environment surfaces.